Static task
static1
Behavioral task
behavioral1
Sample
b844083c3af02927d7934c043a9834aa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b844083c3af02927d7934c043a9834aa.exe
Resource
win10v2004-20240226-en
General
-
Target
b844083c3af02927d7934c043a9834aa
-
Size
120KB
-
MD5
b844083c3af02927d7934c043a9834aa
-
SHA1
330b2fc0f8bb816846a9dde32615fc621304af91
-
SHA256
0cc41cc2d79e3f0280df4048ab9d4fa4c786d251bb8e2ad44f369541ed1cff0b
-
SHA512
8ecf9f4bb90ebbe1094a1f920c28252ddd82dc3473fe72d5a259005414dad9575bbda5602736c833c216a59990624256d9fe5469789488c5a3ee934243428f3d
-
SSDEEP
3072:k5JcrtSwlT2vS67VV6+LriL49QW2ZXF0v:k5SrtSk6RQj2QVZ6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b844083c3af02927d7934c043a9834aa
Files
-
b844083c3af02927d7934c043a9834aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ