Static task
static1
Behavioral task
behavioral1
Sample
b86ae151155fa636f5c656cf8e3e7167.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b86ae151155fa636f5c656cf8e3e7167.exe
Resource
win10v2004-20240226-en
General
-
Target
b86ae151155fa636f5c656cf8e3e7167
-
Size
13.6MB
-
MD5
b86ae151155fa636f5c656cf8e3e7167
-
SHA1
9ebd74072c54c96dde744b850f2a770a79ad2908
-
SHA256
3b6a0208d41b873b5b9d61c47f62cc84d95c10505303b1ac7f7ebf9bb141a209
-
SHA512
ea1c9af66627dec84a5597731991f589cea3acba8b6034b81d45186a92d76fc7ec3b7870a548941cb94d4dd5b05b879e77aeb4015ae959d1921132551ac2104e
-
SSDEEP
196608:pI39UpFCSfYmy1FYuJqb+/pCtqVJfPSgda8Gfq0AmbYqyTsG3cvjJVtES65xSW8c:fzy1//cwg5Am8RpK43DhApG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b86ae151155fa636f5c656cf8e3e7167
Files
-
b86ae151155fa636f5c656cf8e3e7167.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 12.6MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rodata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE