Static task
static1
Behavioral task
behavioral1
Sample
b74ea4f963cb3ca90c6460ed9562e409.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b74ea4f963cb3ca90c6460ed9562e409.exe
Resource
win10v2004-20240226-en
General
-
Target
b74ea4f963cb3ca90c6460ed9562e409
-
Size
207KB
-
MD5
b74ea4f963cb3ca90c6460ed9562e409
-
SHA1
5350eb532abd46e949819ffd345ff4f82b52805c
-
SHA256
16b854b6f0d2febe743fe62f54a8928a81d4cb8489fcd96f0e13423960f6f4e0
-
SHA512
12fd6ab50288aab70d68d02e7fe6817eec8d0b5b55c676010c65e9d3c44d996d8247d6c20037d83aaee106141fa5dc2914d6d930dd5c89873b7b35c19f04d69b
-
SSDEEP
6144:QtuDAoSxLu2caRxWtLpeJvj5WNAD74Ebq0o37oLA7HU9b:QtuDIi0xWtl40NAD7ZWTGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b74ea4f963cb3ca90c6460ed9562e409
Files
-
b74ea4f963cb3ca90c6460ed9562e409.exe windows:4 windows x86 arch:x86
29bd810f448a640871ce275f73c6c03a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
SetLastError
LoadLibraryA
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ