Static task
static1
Behavioral task
behavioral1
Sample
b5843fc71e524bc135caa60f619ec20f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5843fc71e524bc135caa60f619ec20f.exe
Resource
win10v2004-20240226-en
General
-
Target
b5843fc71e524bc135caa60f619ec20f
-
Size
825KB
-
MD5
b5843fc71e524bc135caa60f619ec20f
-
SHA1
8332d2b2741dc97dcedd8fc90c81c2bbc2fd312c
-
SHA256
db74464ed30d2acb412de516d4e33b9526f73d2eb942ab6133e2138c1222585d
-
SHA512
b341848aa17199bb2c417ac6a5b7cb0631590c93fe0dddf6786e61d89ecc3be851713cb588c4b445b1d686b48da505accfa6b4dd345cd408aba3db54d176fa52
-
SSDEEP
12288:HH11glveL+8pInXQAaQN9pr2Lr2YX9FM4InJ+r1xttibsMkLVC2ChnJpfr:vglvp8pIpa+n2GYXcrJ+/ubwVshnDr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5843fc71e524bc135caa60f619ec20f
Files
-
b5843fc71e524bc135caa60f619ec20f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
subaru Size: 767KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE