Static task
static1
Behavioral task
behavioral1
Sample
b4fbd30c27603d9303784b6f3e2eafb4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4fbd30c27603d9303784b6f3e2eafb4.exe
Resource
win10v2004-20240226-en
General
-
Target
b4fbd30c27603d9303784b6f3e2eafb4
-
Size
2.2MB
-
MD5
b4fbd30c27603d9303784b6f3e2eafb4
-
SHA1
7163d6bd3330093bb87b1faf74f91c3ae5b90439
-
SHA256
d229a1386970232abd01e88964298d6554d3242d24545ee6f892906d7597318f
-
SHA512
f76a738af79d99aff084d3b4aead0f52a8e3f156d019b7451966967f7bfe4c368afa1403b6c255c3afe5664e18c0e907a11c89610a721fb8672efb70e8812cdb
-
SSDEEP
49152:R927akOElMaFLkhOPqnstLet3LyJlF/IabjKoh9WsY:RMak7jqnstLEGIabjKoh9WsY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4fbd30c27603d9303784b6f3e2eafb4
Files
-
b4fbd30c27603d9303784b6f3e2eafb4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ