Static task
static1
Behavioral task
behavioral1
Sample
b67bb89f82c6f5ff16108f4694d1689c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b67bb89f82c6f5ff16108f4694d1689c.exe
Resource
win10v2004-20240226-en
General
-
Target
b67bb89f82c6f5ff16108f4694d1689c
-
Size
184KB
-
MD5
b67bb89f82c6f5ff16108f4694d1689c
-
SHA1
5b01ad3ae3197d8bb5c7a8b3b3cbf81d29fd7857
-
SHA256
65c82eb7dd9a11dbd679732dd081ea47e44fb35bd26aebc0be5054e2d055ef41
-
SHA512
8c479dc84ad4101701344c57dd0a2798d44c434ae044373827bbf0333d80de884a42a6567e90f857a050dfea2094080b5400eab2d1b55bf5e78a6e421a553c93
-
SSDEEP
3072:xuRrom0xcOAEAmj4Mhchc8AMEXYMgxIldk7xKDPeVylPvpFo:xuhoqDEAHM6hc83YBCylPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b67bb89f82c6f5ff16108f4694d1689c
Files
-
b67bb89f82c6f5ff16108f4694d1689c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ