Static task
static1
Behavioral task
behavioral1
Sample
b6cae841d8eae545e4c0374ec6c61da3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6cae841d8eae545e4c0374ec6c61da3.exe
Resource
win10v2004-20240226-en
General
-
Target
b6cae841d8eae545e4c0374ec6c61da3
-
Size
43KB
-
MD5
b6cae841d8eae545e4c0374ec6c61da3
-
SHA1
0a55d7154a99bea93f5b838ce68f8f7fb6e04dea
-
SHA256
bf7a3ecd25f69f192274bde24d9f593111c5e03d67b516888a9d5eebf50e6162
-
SHA512
b48c091f8ec55d97f2b1ae8a22a4404e0a54b424d8b939726fbc63153a91e442fca3d33eb2b02eb4599f168cf8b7da201b6be31b53e0710b01f774093463e237
-
SSDEEP
768:555b6hvG3vTOOT4B5Dpsx6Ixd1d65Hrsh3Tm39cgrwX8aUwhgEVPsOneab:P52hvgOOT28x6IxdlBwfrbafgESOnei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6cae841d8eae545e4c0374ec6c61da3
Files
-
b6cae841d8eae545e4c0374ec6c61da3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
c{�Ӆ Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�Z��#G�7 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�% r�n�" Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
P! &� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE