Static task
static1
Behavioral task
behavioral1
Sample
b789a3e4eb881cb45624f9d7160185c9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b789a3e4eb881cb45624f9d7160185c9.exe
Resource
win10v2004-20240226-en
General
-
Target
b789a3e4eb881cb45624f9d7160185c9
-
Size
102KB
-
MD5
b789a3e4eb881cb45624f9d7160185c9
-
SHA1
c811289889e8f1b73969cf72a985af8f97d5d779
-
SHA256
1a01f57a8adcb2f89ab0e104cd6e1b3d3765a9856e79a4a19da7b17b8781e8d0
-
SHA512
9afdc053bc276235ac6da43ad63ba54eed4c2791892e8e63e73ca9bbeb8c6c7f5d074d0efa71982b7526a8a010482a07e41e669c8d8ecfdf581018886badb52f
-
SSDEEP
3072:sz6f8wF2JRiBbcIN5F7cgKFnPgZPBQ3G/pcI:Df8y2J8cIN7coF4GRcI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b789a3e4eb881cb45624f9d7160185c9
Files
-
b789a3e4eb881cb45624f9d7160185c9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE