Static task
static1
Behavioral task
behavioral1
Sample
b4c95716423a71f1744795ad0fa54ea7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4c95716423a71f1744795ad0fa54ea7.exe
Resource
win10v2004-20240226-en
General
-
Target
b4c95716423a71f1744795ad0fa54ea7
-
Size
20.0MB
-
MD5
b4c95716423a71f1744795ad0fa54ea7
-
SHA1
57dddd11ce8e8c8f917c57f44ed4c1a67808d63d
-
SHA256
6a667db0669d8be76965919a92e2aae9358861964293b3926b951ecd398422b4
-
SHA512
4e2cac86312c3614f775df94e72e440682132d4e70b0e1ce68b0259b7a0d66f019fbffeb4d9e967293f8f2c8e63cdde7c98e74b46273e0fc36aaf4cb6501fb89
-
SSDEEP
393216:JxhdZKU++qQkeA4pfTPAeQyvQbU/cA2p3Jj6kVFDbxwTHhf09yDPRl:J1h+mkeA4BrQkSUEA2VJv/bIxHJl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4c95716423a71f1744795ad0fa54ea7
Files
-
b4c95716423a71f1744795ad0fa54ea7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 289B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 65B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ