Static task
static1
Behavioral task
behavioral1
Sample
b9fddafff079cd23f75eaa9c34a10f64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9fddafff079cd23f75eaa9c34a10f64.exe
Resource
win10v2004-20240226-en
General
-
Target
b9fddafff079cd23f75eaa9c34a10f64
-
Size
43KB
-
MD5
b9fddafff079cd23f75eaa9c34a10f64
-
SHA1
4f651e7b85d3122299f8db0f71a918589489165e
-
SHA256
df6cbce0d3d935f5e944c56c1c17b0fb369283f7b6af56ad345754905c361317
-
SHA512
813bed2831a7eaae18f1bbb6360d253baae4f8d5802f603ba3a3f79176309df7854caf1932701f18d106e6691a9a76b64e1f50ec00fd1fc45e9bfbc4b58ec4d9
-
SSDEEP
384:wOr8/zg2KcWFUYXsUxhIouQAoLWikHEPe1b1fMnJVlLmeDpjxwwCSECT43ACaXhY:2/zYd3gb+lC8x//4ghVCn/prwyV41XKT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9fddafff079cd23f75eaa9c34a10f64
Files
-
b9fddafff079cd23f75eaa9c34a10f64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�����EU Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
����AP\ Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��.�@7$� Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�2�T��p Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE