Static task
static1
Behavioral task
behavioral1
Sample
b460c19a49afc6ff621f5f9fd1c8fe81.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b460c19a49afc6ff621f5f9fd1c8fe81.exe
Resource
win10v2004-20240226-en
General
-
Target
b460c19a49afc6ff621f5f9fd1c8fe81
-
Size
30KB
-
MD5
b460c19a49afc6ff621f5f9fd1c8fe81
-
SHA1
1d0d7206eef4b30f60c9dcb7a74ed5077be0fe37
-
SHA256
3aae6542898489155df8ad79e642592116b03749c6971e4450c34566975ce89d
-
SHA512
179f21208c08c182e9659b4ebb72d072f8022d6e10ab51c42fde3f35d8fd9834609e5f27dacb6b66121587419e203869281ffa89342557ed08386ce7369c3aaa
-
SSDEEP
384:2zJY5z/rLAo2SKb9nmmx6u6iOEuOPlyHDB2V/gp0ix70POMmxdA4o1kjW+//cW:OY5bAocbBD6I6YFi50GMGdfo1kjP31
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b460c19a49afc6ff621f5f9fd1c8fe81
Files
-
b460c19a49afc6ff621f5f9fd1c8fe81.exe windows:4 windows x86 arch:x86
8bd000da58e1d6d6ffebce09086ef7da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoA
ReleaseMutex
GetSystemDefaultLangID
TlsFree
GetConsoleMode
GetConsoleAliasesLengthA
GetThreadLocale
HeapWalk
ShowConsoleCursor
FreeResource
InterlockedIncrement
DosPathToSessionPathA
GetComputerNameExA
SetVolumeLabelA
UTRegister
GetVolumeInformationA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
text Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: 22KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ