Static task
static1
Behavioral task
behavioral1
Sample
b672e781cd826c384ea4a866548c94e1.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b672e781cd826c384ea4a866548c94e1.exe
Resource
win10v2004-20240226-en
General
-
Target
b672e781cd826c384ea4a866548c94e1
-
Size
25KB
-
MD5
b672e781cd826c384ea4a866548c94e1
-
SHA1
274bc5303238c2641ba288e657a98478362e2027
-
SHA256
79e278981c21f058b223a82109eddc18fe6ee416cba70c9230542689a5452860
-
SHA512
56efee7a8c0ab1254df30a9b7cdbda45a775e671c4850297a0a03df3cf4629bdf47c5fb79c868012fc310475934d78a86324bda2f129fca713dee3cf092fef1b
-
SSDEEP
768:bzcHOihrInEuW836+XMEFMvNcsY+dwXh2h:sgEuWlEyVc/3h2h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b672e781cd826c384ea4a866548c94e1
Files
-
b672e781cd826c384ea4a866548c94e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE