Static task
static1
Behavioral task
behavioral1
Sample
b7dc9dca5060c86e629506632e456cc6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7dc9dca5060c86e629506632e456cc6.exe
Resource
win10v2004-20240226-en
General
-
Target
b7dc9dca5060c86e629506632e456cc6
-
Size
16KB
-
MD5
b7dc9dca5060c86e629506632e456cc6
-
SHA1
f6c9a97f05b3dee9e5c304963c6e234e2812a580
-
SHA256
e1d6a8b072682c49f07435892b082be3de5364396b00e860824b586b1ef0fbee
-
SHA512
ee0cd28901742794fddd58f296e7f5540c2be97782a68ab707f4b83ce377666d76ab137a9a43de70147757e68a309d26b512dbf0f3b2afbcf55606766de8f3b0
-
SSDEEP
384:TpOxCWxSEVqFsetE1gQV/WcuLHjP/AvIw1Xvdg:T8xSEVqjE1gQIcuLb/AvIw1fe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7dc9dca5060c86e629506632e456cc6
Files
-
b7dc9dca5060c86e629506632e456cc6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 544KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 501B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ