Static task
static1
Behavioral task
behavioral1
Sample
b640bb101de19681198a241424b36852.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b640bb101de19681198a241424b36852.exe
Resource
win10v2004-20240226-en
General
-
Target
b640bb101de19681198a241424b36852
-
Size
82KB
-
MD5
b640bb101de19681198a241424b36852
-
SHA1
6cfd75c19da4cecd58213986c12dbcfb89283c69
-
SHA256
aa7770e930a64cf55437de7608174bd10d42b7ad99bacb657095c9be7934f905
-
SHA512
2c3c17f481a727920fdb30d58c538b1ff930323cd52963cc0242275592e418c87e222ca3f068e4e1ec240e2e16f93dc188bcca47d55f9e41de981d18174f7b7b
-
SSDEEP
1536:JgQNeeFG134M7FW9j36I7eY8XuPhS5hOVE6u4O2t983G+HNtc/trV1nMegQ7JYb3:JweM7FW9j3xBuMS50uotN+HNtcR7T7J6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b640bb101de19681198a241424b36852
Files
-
b640bb101de19681198a241424b36852.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ