Static task
static1
Behavioral task
behavioral1
Sample
b9afea14e73f16b8a816eda002a6dbba4332ab5f5758d0c0942a10f8fec8e1fd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9afea14e73f16b8a816eda002a6dbba4332ab5f5758d0c0942a10f8fec8e1fd.exe
Resource
win10v2004-20240226-en
General
-
Target
b9afea14e73f16b8a816eda002a6dbba4332ab5f5758d0c0942a10f8fec8e1fd
-
Size
320KB
-
MD5
0d4895ce95277ca7aca04421b635d5ca
-
SHA1
88d061d1b72dffad53de97016ec555c9ff1ab5b7
-
SHA256
b9afea14e73f16b8a816eda002a6dbba4332ab5f5758d0c0942a10f8fec8e1fd
-
SHA512
67949f11cab9a3af821900d816f3d19fc25b863c181a7d1d200a29a6abdbd8b9a599c44e8cecdbbc0957ed4b51a96e8743828436060ebc38978eab22e7319a09
-
SSDEEP
6144:+Lc44Qua3vlbY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:+LlPvMm05XEvG6IveDVqvQ6IvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9afea14e73f16b8a816eda002a6dbba4332ab5f5758d0c0942a10f8fec8e1fd
Files
-
b9afea14e73f16b8a816eda002a6dbba4332ab5f5758d0c0942a10f8fec8e1fd.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ