Static task
static1
Behavioral task
behavioral1
Sample
b5d8d6f0e18bbc0dfb8f66f9998b52ac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5d8d6f0e18bbc0dfb8f66f9998b52ac.exe
Resource
win10v2004-20240226-en
General
-
Target
b5d8d6f0e18bbc0dfb8f66f9998b52ac
-
Size
512KB
-
MD5
b5d8d6f0e18bbc0dfb8f66f9998b52ac
-
SHA1
fbfe3d1e24879afc8f2fddf2928da5e2b487d12b
-
SHA256
4ca92723fb225658eb398dd1fc82a412779980343c5e1da8e2d77de17a08f4e4
-
SHA512
5abfb0966ec1f8d53a8275a8bf225dd350986d340e43ac26f033715de1b2f4065807db280090495c25e1f588fc683bdff3e670b0b6150fc544cbb67dd1178320
-
SSDEEP
12288:BrQz7cQi+O3zUr1kn4DdxjuneDSCDRRIGSls4IQcy:FQKDekn4hxjfDRYcy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5d8d6f0e18bbc0dfb8f66f9998b52ac
Files
-
b5d8d6f0e18bbc0dfb8f66f9998b52ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 801KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 173B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE