Static task
static1
Behavioral task
behavioral1
Sample
b5103cbfcd79d32e43fdd3e4be0e08ef.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b5103cbfcd79d32e43fdd3e4be0e08ef.exe
Resource
win10v2004-20240226-en
General
-
Target
b5103cbfcd79d32e43fdd3e4be0e08ef
-
Size
385KB
-
MD5
b5103cbfcd79d32e43fdd3e4be0e08ef
-
SHA1
3b46cd9c0dec3f2adea4f00a4b5e88be9d5cbb8b
-
SHA256
efbbfdba6bcf96b7fd5c2930360b175ddfa7fb4bdfa9a9827b95c2fa09a5e945
-
SHA512
d6a840d07c970514fc949dbb7bc0f1c29406d83d09ad31a2c7eb688d63dca126409754c25b1356b3135076a9c8844dec42f5f95b62b42b3bc4c118824ddef6b0
-
SSDEEP
6144:yJ6i+qWhARBqUFBzkju2Y09iOUW6CAULmBLUAcMVjkCXt378llLi3rAB:y6iXUcBqsIUGpUWaEmBR1Vzpsi7AB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5103cbfcd79d32e43fdd3e4be0e08ef
Files
-
b5103cbfcd79d32e43fdd3e4be0e08ef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ