Static task
static1
Behavioral task
behavioral1
Sample
b8101d3e75e0e6ef78fc57c3e19b1cdf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8101d3e75e0e6ef78fc57c3e19b1cdf.exe
Resource
win10v2004-20240226-en
General
-
Target
b8101d3e75e0e6ef78fc57c3e19b1cdf
-
Size
156KB
-
MD5
b8101d3e75e0e6ef78fc57c3e19b1cdf
-
SHA1
2c6b1b7c3d4b3cb3b9e81c0d759eb055c67c1797
-
SHA256
ed976f3fea8d5fca3aa15ba5288ad751064f1f5c808bce1f9c01cc94e1d90ccf
-
SHA512
faef49c4942a87b3d936b3663a0abeb750882c4a2a3d3d095d8cd21e37e5ef4dfb4f849b64dd383fa1768ffbeb01808d74c7733344629c0fca4e4c8823da7052
-
SSDEEP
3072:1ZWbAVJSf2QlHqt4yemnLLphn9DTGCRXciLgx9pQFSf:1ZZmeKHqt4yLz9D5u4wG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8101d3e75e0e6ef78fc57c3e19b1cdf
Files
-
b8101d3e75e0e6ef78fc57c3e19b1cdf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Sist Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Sist Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ