Static task
static1
Behavioral task
behavioral1
Sample
b6035bf4d096206aa6638771db6e4e02.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6035bf4d096206aa6638771db6e4e02.exe
Resource
win10v2004-20240226-en
General
-
Target
b6035bf4d096206aa6638771db6e4e02
-
Size
3.4MB
-
MD5
b6035bf4d096206aa6638771db6e4e02
-
SHA1
92080dfbab9d197582f7b40e4ab7412bac4a3bbc
-
SHA256
98ad8c3b2486937ece3622202e1beffe283134b403687b04df9cf14aab52ca94
-
SHA512
cea09f2d0700ff17abdbbe8e03ead59ab0847ffae26a8f6fcbf248806e2f4fdf705729969407ca689f59dee511b51e15d86795cbf0a2fdad1132dfd8993c4767
-
SSDEEP
98304:dRzwsLWCc55k+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsV:vC5tmA8uQy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6035bf4d096206aa6638771db6e4e02
Files
-
b6035bf4d096206aa6638771db6e4e02.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ