Static task
static1
Behavioral task
behavioral1
Sample
b4f0cc2dae8fe34b5264fd71afab29f9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4f0cc2dae8fe34b5264fd71afab29f9.exe
Resource
win10v2004-20240226-en
General
-
Target
b4f0cc2dae8fe34b5264fd71afab29f9
-
Size
2.4MB
-
MD5
b4f0cc2dae8fe34b5264fd71afab29f9
-
SHA1
ecd844417607518bb9196ed9a04bdadc3b6497ce
-
SHA256
d643e44446f4ea9fc81c5f0fd2daf27a292778936b95b1dee335b2409d486aee
-
SHA512
48412814ff04515ee8fe01223b7fe5ed5a2f3609d805bece34b1e367f16d8f2cc11a5f22b9db73556edf7fb652a3e0a323e16d165a75c5c59cd843058c59df7d
-
SSDEEP
49152:hXrOO53RTqti2Igjdsk9WnODv9MxcY/BCIabjKoh9Wj:hXrOO535gjOk9WOb9LRIabjKoh9Wj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4f0cc2dae8fe34b5264fd71afab29f9
Files
-
b4f0cc2dae8fe34b5264fd71afab29f9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ