Static task
static1
Behavioral task
behavioral1
Sample
b4ca5d6d5a03490edccfb52ee9d1a32e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4ca5d6d5a03490edccfb52ee9d1a32e.exe
Resource
win10v2004-20240226-en
General
-
Target
b4ca5d6d5a03490edccfb52ee9d1a32e
-
Size
48KB
-
MD5
b4ca5d6d5a03490edccfb52ee9d1a32e
-
SHA1
6c7588c310674bb2529b7bbaf63947ab482773f2
-
SHA256
f7dc2a27dfd8beb086c2d6c41aae33990005174766ffd0872299b5a3144d9134
-
SHA512
336d905f6c7021c62a596c44b39bf9c7a1e4b57b2e653ea444251a905a11b323744764374a4a59fdec9769c8c2c92b3a83c3666b011a069b7a1540c5c7514e78
-
SSDEEP
768:EyW1yBtObv0U/xwPp0EoooiYECG2nZF5sZVcmxA:24Bobv7aB0EooYEC3rUVcYA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4ca5d6d5a03490edccfb52ee9d1a32e
Files
-
b4ca5d6d5a03490edccfb52ee9d1a32e.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 19KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE