Static task
static1
Behavioral task
behavioral1
Sample
b448ffd237c9a5083636c59ad808f585.exe
Resource
win7-20240221-en
General
-
Target
b448ffd237c9a5083636c59ad808f585
-
Size
857KB
-
MD5
b448ffd237c9a5083636c59ad808f585
-
SHA1
d23cd3c566d3900dc9f96d5795878f56356aafcc
-
SHA256
6598e9ba23cc2c2a7c8466bb13f2078cbd88016e76d9b90b1f385dc51eb7fe41
-
SHA512
15ddbc40d2a27cc72f6dde3b78dabfbfecb34abd16754f517d8d4130a336f84fa6207ab42f4f7b94312a9d7e7da07c52af9b6e57ec14e2d5c0ca188a755ce97f
-
SSDEEP
12288:/8PAzTjmzl6vGi4a5ewyJ5H63ANiKBHLrpudIh/FBn8S6ZLKF1+XvzE:/iAHjmEvt4atuCYiKhAdw/FSBZLvX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b448ffd237c9a5083636c59ad808f585
Files
-
b448ffd237c9a5083636c59ad808f585.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 788KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ