Static task
static1
Behavioral task
behavioral1
Sample
b57f2b1c856a547ea33247fe4c9cb7dd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b57f2b1c856a547ea33247fe4c9cb7dd.exe
Resource
win10v2004-20240226-en
General
-
Target
b57f2b1c856a547ea33247fe4c9cb7dd
-
Size
132KB
-
MD5
b57f2b1c856a547ea33247fe4c9cb7dd
-
SHA1
f810d8953ced44a981f7cedfa3c1ccd3e099fa28
-
SHA256
d63160a9cca6fa2b619749f4f6cec74feb329c2bee4fe2db931afb0e1e2ea077
-
SHA512
1cbd48ed01282fdd6d49898c11796e6d4fa77ada23f839334b90de65cb4ee973a7bf837e67928d06cd4b8222132f2cdf46076d874864448c0af80966e912693b
-
SSDEEP
1536:aWZ5vvCs9eTo0+HBldN5ZnBPGP2+VUzIlqrgAy2xVRTpYTx8ky5d7hdkakjaD53P:VZJT9eQTdNrBJ8Uhg0BYhot283MpSh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b57f2b1c856a547ea33247fe4c9cb7dd
Files
-
b57f2b1c856a547ea33247fe4c9cb7dd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 276KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ