Static task
static1
Behavioral task
behavioral1
Sample
b565e39e36284365941268ef2d71cf4e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b565e39e36284365941268ef2d71cf4e.exe
Resource
win10v2004-20240226-en
General
-
Target
b565e39e36284365941268ef2d71cf4e
-
Size
184KB
-
MD5
b565e39e36284365941268ef2d71cf4e
-
SHA1
866c94ddf79065b4f40aa6fa758eb62a8bca441b
-
SHA256
8293fa2df6773e12cce547fa610881b9c740ab8b44a0456e8fe25e4e0c2a465c
-
SHA512
f8f8a37802394c32bab69046b2b5b02a8aa2eb236acd13ebb26434998bfcc4e7fd53bcdb0846d809a54cfb125ea489cc41220cb69929c86d5e7bcd8e735cca42
-
SSDEEP
3072:0PmBo98H4DA85OjndTsWI8hb6ZM6iOgiWDExXMPmsNlPvpFh:0P8ox885QdoWI8s/ZmNlPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b565e39e36284365941268ef2d71cf4e
Files
-
b565e39e36284365941268ef2d71cf4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ