Static task
static1
Behavioral task
behavioral1
Sample
b628c5a516f4d175f4d694a86014dce9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b628c5a516f4d175f4d694a86014dce9.exe
Resource
win10v2004-20240226-en
General
-
Target
b628c5a516f4d175f4d694a86014dce9
-
Size
385KB
-
MD5
b628c5a516f4d175f4d694a86014dce9
-
SHA1
ad1eab57609ec533b141d96a4d5b1690216fdb33
-
SHA256
8f8ee9a8652099d81b48a087a92c53bf9d0a93f74a416a1b7e28ca8cf83511c1
-
SHA512
c83f78b78c5a8b534763df5238914a949ae151209b32dfebb480a6bcf7d9c4dad5023345e460cffb17e4f09b4395db37b776ec927af3151b0b7260e3376fcd81
-
SSDEEP
6144:vKcLPL1Yf30rvELs13WBumjEh9+jyagOaBV9Y6d0/qiw0dLGfoa9oB:NPL1S30rosIcmI0p5adhOqihdLGfofB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b628c5a516f4d175f4d694a86014dce9
Files
-
b628c5a516f4d175f4d694a86014dce9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ