Static task
static1
Behavioral task
behavioral1
Sample
b3f88b89ced0c73044a41beb5b20bb79.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b3f88b89ced0c73044a41beb5b20bb79.exe
Resource
win10v2004-20240226-en
General
-
Target
b3f88b89ced0c73044a41beb5b20bb79
-
Size
2.9MB
-
MD5
b3f88b89ced0c73044a41beb5b20bb79
-
SHA1
da984485dd28bda809ad050dae50b1ad8480b606
-
SHA256
f50199b9c5b70b534275b4de5ecb1eefe0291d1b214138abaacc54d62d76bb7d
-
SHA512
e4c678841e7a55112ce1d555e515170f2c2116ec6b0fb04f75ae2873a7c6f32c6b323e3dec7166cefd9fc0e20aa4eff5b801642733baadbce2d61f980b7da25b
-
SSDEEP
49152:iENvofCLfUv0g7mM+M6RkMkIM7I067ewnNTBFmUi6AjW/MUSdGRf3/LHM0g7mM+Q:7of+M+M6RkMkIM7EMjxAZlM+M6RkMkI0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3f88b89ced0c73044a41beb5b20bb79
Files
-
b3f88b89ced0c73044a41beb5b20bb79.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ