Static task
static1
Behavioral task
behavioral1
Sample
b59e5aa4a1948f264866de118cb977f9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b59e5aa4a1948f264866de118cb977f9.exe
Resource
win10v2004-20240226-en
General
-
Target
b59e5aa4a1948f264866de118cb977f9
-
Size
116KB
-
MD5
b59e5aa4a1948f264866de118cb977f9
-
SHA1
6e3ac2e4ffb6f5472cf619597dc71a26bf2fd18a
-
SHA256
2d13c3b565237d3e5c1b4ebdd172298d17b8d2eba28a92b45e4e033452334a71
-
SHA512
f370b5a2b3d79fd05d5e4726731653827bf2ef174c5dcfa7239606f08e7d62cd7545702555798ac62490a6ef267c74c40dd68cc6ae0eefbea29bb8cbf51d42ea
-
SSDEEP
3072:w8RD56OenlO369uX07lz7e5xCqROhvDQdg:9NinuXo99aIUO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b59e5aa4a1948f264866de118cb977f9
Files
-
b59e5aa4a1948f264866de118cb977f9.exe windows:4 windows x86 arch:x86
7bcb4be8a284e4ec65e8f7af4ff9f3bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord696
Sections
.������� Size: 106KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.������� Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE