Static task
static1
Behavioral task
behavioral1
Sample
b878fd79cce4ebbba98c894885683056.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b878fd79cce4ebbba98c894885683056.exe
Resource
win10v2004-20240226-en
General
-
Target
b878fd79cce4ebbba98c894885683056
-
Size
15KB
-
MD5
b878fd79cce4ebbba98c894885683056
-
SHA1
55107407028f0259f13bc1c43878946e715cee7b
-
SHA256
571d3112cb55295e5a8c240caf1e6594546a730180f80064604df01202a26489
-
SHA512
b414717abd61bc68a24629a13ad4c60a0477b9f91af0724b5c536ca1e64f1388bf06930524e240a90580993402ed472b9307e5c9102e99962b6dbed6d4f297f9
-
SSDEEP
192:X+KGh/aR6teYL95iyp22mkhKXdkiCcbDT9F3h21wrWLxgMnFk73+ld:X+//aR6UYb7yWBKDBFn4S73Gd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b878fd79cce4ebbba98c894885683056
Files
-
b878fd79cce4ebbba98c894885683056.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 82KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ