Static task
static1
Behavioral task
behavioral1
Sample
b82e9c9cc20c2182f6609a198c7eb462.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b82e9c9cc20c2182f6609a198c7eb462.exe
Resource
win10v2004-20240226-en
General
-
Target
b82e9c9cc20c2182f6609a198c7eb462
-
Size
473KB
-
MD5
b82e9c9cc20c2182f6609a198c7eb462
-
SHA1
a255b4cf34ab83d94a321214da9d2789b2e70f93
-
SHA256
71ffbbc9c459639661f0c3dbcae8774de3b9548fd318af6d3455d100e56c6a94
-
SHA512
bb784acce951e95189aed8a803a4ab8174ce556a2c97e429e821ecf52f8cb7a32f51554f8db061a5ba2295c92320517766213b2de8551422ee8515adf181199d
-
SSDEEP
12288:cHlN9lj7xkW1OerEP8F3Z4mxx0LL6aBqgPwV+7q9:cH7jXbrEkQmX0X6GqgP0v9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b82e9c9cc20c2182f6609a198c7eb462
Files
-
b82e9c9cc20c2182f6609a198c7eb462.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 153KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE