Static task
static1
Behavioral task
behavioral1
Sample
b64faae9e46797cc43887af7af1f9cf8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b64faae9e46797cc43887af7af1f9cf8.exe
Resource
win10v2004-20240226-en
General
-
Target
b64faae9e46797cc43887af7af1f9cf8
-
Size
127KB
-
MD5
b64faae9e46797cc43887af7af1f9cf8
-
SHA1
ac9c4e373738055a9f12dfc4bbf85f45900312a0
-
SHA256
2a1ffac2253c4cac43806a6675708f8cbeb5fce718c4c5c90a096ac8c01ed92c
-
SHA512
e83a91ada4da1535e242698fd909214577961d1701bbba9b7995e20eccda5bda5105504468fba06b1a16fd19382186e75be5d0b08e8023f78eacd63b9df3fcfb
-
SSDEEP
3072:ZF/P1cYC4HS3g3QqlDbHk073a6nD+DjcArOM/J3/cYL:rPKH+F3Qqdk073a6D+PFrOMBUC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b64faae9e46797cc43887af7af1f9cf8
Files
-
b64faae9e46797cc43887af7af1f9cf8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xdxhaimx Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lll7jvg Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a4iss Size: 4KB - Virtual size: 665B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE