Static task
static1
Behavioral task
behavioral1
Sample
b59462195380bcc0c143a293496b3f6b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b59462195380bcc0c143a293496b3f6b.exe
Resource
win10v2004-20240226-en
General
-
Target
b59462195380bcc0c143a293496b3f6b
-
Size
3.0MB
-
MD5
b59462195380bcc0c143a293496b3f6b
-
SHA1
4cb1ff5b6f9680e2d763822758c8dac01ced6095
-
SHA256
9c62bac24b1f3ddf475aca0b4849a41a7d8f01d0243d6823e806cf370ca18138
-
SHA512
80145eca71cdcacef320cfea8f4a32309cdfaa73bf56daa0a01a0cb36edcdcb006c9ed6089e4a195f1361ae364e7d9e960860522873dffab9c2a70c2c750071c
-
SSDEEP
49152:h7OxakOElMaFLkEsNBk9/fw2BwfmM0f8HkakOElMaFLk:hYak77sNi9Xwgwfodak7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b59462195380bcc0c143a293496b3f6b
Files
-
b59462195380bcc0c143a293496b3f6b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ