Static task
static1
Behavioral task
behavioral1
Sample
b67bf44b6201aab7edb22445927e1915.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b67bf44b6201aab7edb22445927e1915.exe
Resource
win10v2004-20240226-en
General
-
Target
b67bf44b6201aab7edb22445927e1915
-
Size
628KB
-
MD5
b67bf44b6201aab7edb22445927e1915
-
SHA1
5116c787a821519146a779edfaf9cfccf6d9dca3
-
SHA256
fd2c579c6c9412aaf1b0e56fc3eca8c11089f06e199d637112117f2b54024b3d
-
SHA512
3e472a896b00f1ae6d4d4bdcfa1dc15480d5abf98d78629a6733b9c66173d5e5a332848832405494e8952fd30e28d407eeee0e7d5aa766c36bcc496552c7468d
-
SSDEEP
12288:daw63SS52cixS27m+VH1RAcvD477bd8Co2TiA4oiZ7:dOC33x5S+6cL43RXoAiZ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b67bf44b6201aab7edb22445927e1915
Files
-
b67bf44b6201aab7edb22445927e1915.exe windows:4 windows x86 arch:x86
d5f2d8849813a4009dd8b330de1b3bde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DefWindowProcA
oleaut32
VariantChangeTypeEx
Sections
Size: 615KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE