Static task
static1
Behavioral task
behavioral1
Sample
b5b8ef62117c33eb6c85a693de18bb9f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5b8ef62117c33eb6c85a693de18bb9f.exe
Resource
win10v2004-20240226-en
General
-
Target
b5b8ef62117c33eb6c85a693de18bb9f.bin
-
Size
82KB
-
MD5
b5b8ef62117c33eb6c85a693de18bb9f
-
SHA1
c9141a0348f4f58afc965feeb52a94012e4c8644
-
SHA256
c35d5459931946aab3dcaba1d30fb49df51b5b0113bf4ad3b6a0b92f2124fe64
-
SHA512
74d73c29a8de2d67cfe8f4971dab1ea0cf9be23abc8018a16aacace88c58daee981cbf1244484a0c8a62e412e302a66ae02dfb253c5fff5d66f01d5788c3fe5a
-
SSDEEP
1536:7FBuEQ74QXK0Wx6400Qx5POPiPTPxPdPVPkYPXWYjzr/30rPX6qSWuSM/a5JOD5l:7LuEQS+jxFdrXf0rSXS5SEuzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5b8ef62117c33eb6c85a693de18bb9f.bin
Files
-
b5b8ef62117c33eb6c85a693de18bb9f.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ