Static task
static1
Behavioral task
behavioral1
Sample
b54958596955ffcb00a32d95b7e5168f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b54958596955ffcb00a32d95b7e5168f.exe
Resource
win10v2004-20240226-en
General
-
Target
b54958596955ffcb00a32d95b7e5168f
-
Size
224KB
-
MD5
b54958596955ffcb00a32d95b7e5168f
-
SHA1
fd3f3b25d55149ee2a95f31f5fbb59a1ea39fc04
-
SHA256
dccc75cdb291071550788e87b331293a21651ab83a0bb7959e08498af3732d52
-
SHA512
aacf366eb88ede20bbb257f472f0496854f3e3639d02d6db78f00b123f9d6f702e698433a122fba2403c4dd3febd5dc366952ea3c28c13ad298bbaf4de5879bc
-
SSDEEP
6144:/SwKH95Co9F30rr+4pcBIB7k1+ygqJRF:/SlH98Kl0e4pcuN++1qJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b54958596955ffcb00a32d95b7e5168f
Files
-
b54958596955ffcb00a32d95b7e5168f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ