Static task
static1
Behavioral task
behavioral1
Sample
b5ecb0f85bad991764096d70450570d4346ed8d75aa5397c030468f72e1f757d.exe
Resource
win7-20240221-en
General
-
Target
b5ecb0f85bad991764096d70450570d4346ed8d75aa5397c030468f72e1f757d
-
Size
2.8MB
-
MD5
979da4f3f06b05d1cb2157ca5ac962df
-
SHA1
c2321a373280d79a6a78e669e527164cceeeb424
-
SHA256
b5ecb0f85bad991764096d70450570d4346ed8d75aa5397c030468f72e1f757d
-
SHA512
5b329beffbdbf42977219d9d01782f9ec490461e8f47e9809772b1a85e63adb94c680b722c4c9fcb20bc9dcb60bc81b3d8119d3aa61158c645643b80f91c9662
-
SSDEEP
49152:NBH6gLKJuMarhVnMFwTH8/giBiBcbk4ZxZ2DqFeVMhuxcPh:NUd1XdhBiiMa7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ecb0f85bad991764096d70450570d4346ed8d75aa5397c030468f72e1f757d
Files
-
b5ecb0f85bad991764096d70450570d4346ed8d75aa5397c030468f72e1f757d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE