Static task
static1
Behavioral task
behavioral1
Sample
b57ddbe2ba6dd92394ee7b818a9d8c56.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b57ddbe2ba6dd92394ee7b818a9d8c56.exe
Resource
win10v2004-20240226-en
General
-
Target
b57ddbe2ba6dd92394ee7b818a9d8c56
-
Size
36KB
-
MD5
b57ddbe2ba6dd92394ee7b818a9d8c56
-
SHA1
03df455748df8821cd4c0d366124076743eac025
-
SHA256
ce5bdcb8bfc54d89a9adb36308706ddf049a204db0f53d64a06f74a0dd3f120f
-
SHA512
d7dff8f15e52e1dccd2ab47a996191f0f0107d230fee32d45704d18305611514766753f8d483d59dd376caefeebdd0c25b9702d2819d429583ce888ebee17a15
-
SSDEEP
384:ZOUQ7mJ1DNUtxSuud+PQES9tXMXa9medHtvi653C1QyaDmGWDYpTWKLS:ZTQ7mfWaujctXoaptviE3tyaa3DYVBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b57ddbe2ba6dd92394ee7b818a9d8c56
Files
-
b57ddbe2ba6dd92394ee7b818a9d8c56.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE