Static task
static1
Behavioral task
behavioral1
Sample
b7f30b1f24558a9537412f5f1f7c7420.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7f30b1f24558a9537412f5f1f7c7420.exe
Resource
win10v2004-20240226-en
General
-
Target
b7f30b1f24558a9537412f5f1f7c7420
-
Size
2KB
-
MD5
b7f30b1f24558a9537412f5f1f7c7420
-
SHA1
043c3824dddde4b14115121aa76936813ea44742
-
SHA256
d0b7f00d9d9d74cc07f022f6948effcb8a4f0c9addf55c1a7d2e19a2f65e4850
-
SHA512
00190ca70529c392078e434944e3295dfe3227ba57e090006b14c21f4bb27ee4fc72e33ea2d9a32cc9b374dd83c22eae070f99cf40b9b656a70994be9442fed4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7f30b1f24558a9537412f5f1f7c7420
Files
-
b7f30b1f24558a9537412f5f1f7c7420.exe windows:4 windows x86 arch:x86
cdfb7dc03d81d4b4179607325043cb13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
WinExec
lstrcpyA
urlmon
URLDownloadToFileA
Sections
.text Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE