Static task
static1
Behavioral task
behavioral1
Sample
b48f8a075924e7e4ec9075b44e353af73aa0aeff8bd49a4fa97cf3ac1a944dfa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b48f8a075924e7e4ec9075b44e353af73aa0aeff8bd49a4fa97cf3ac1a944dfa.exe
Resource
win10v2004-20240226-en
General
-
Target
b48f8a075924e7e4ec9075b44e353af73aa0aeff8bd49a4fa97cf3ac1a944dfa
-
Size
64KB
-
MD5
2a4bd765d967e18c24434149993192f4
-
SHA1
ee897bc9d0b71a4d2b9def57c1e5bfa28241eb61
-
SHA256
b48f8a075924e7e4ec9075b44e353af73aa0aeff8bd49a4fa97cf3ac1a944dfa
-
SHA512
79e59931ef3e116c1f8ef92e41a2348a011cba0f118a0b58fe861af63be0aa44aa97d011f5c42fe78260e3223a26e1f3528dd65e9db63345c7379bcb0a0c77bf
-
SSDEEP
1536:E7csADpR8hxfNUxiqbByeoNsV1iL+iALMH6:Ew/zExXzGV1iL+9Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b48f8a075924e7e4ec9075b44e353af73aa0aeff8bd49a4fa97cf3ac1a944dfa
Files
-
b48f8a075924e7e4ec9075b44e353af73aa0aeff8bd49a4fa97cf3ac1a944dfa.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ