Static task
static1
Behavioral task
behavioral1
Sample
b4f8c5f633aba50eef70f86754be98d9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4f8c5f633aba50eef70f86754be98d9.exe
Resource
win10v2004-20240226-en
General
-
Target
b4f8c5f633aba50eef70f86754be98d9
-
Size
5.6MB
-
MD5
b4f8c5f633aba50eef70f86754be98d9
-
SHA1
de980d3dc82fa3ed25c234099c85ff35da1f0709
-
SHA256
4899bf19f58cf2719b73b4d10b94fc5b753b2cb6570c357a9f8c74f239a22dfb
-
SHA512
42f488a2cc9c71d7e86d0b6f2669718a9d93a29ac0a2998a95a088bf644dcdf70e4f81ec899e41d738a92a456f3a713871d4b7f796f3ccf8df96581db74b8a98
-
SSDEEP
98304:dHcHKHcHV29XJdXN0B7+s3Ohv7StGL9IW1dXg3S/MHmgJ9X7q:dHcHKHcHY8EvUjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4f8c5f633aba50eef70f86754be98d9
Files
-
b4f8c5f633aba50eef70f86754be98d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ