Static task
static1
Behavioral task
behavioral1
Sample
b896768cb05a25e77ca77489d5ccb42f.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b896768cb05a25e77ca77489d5ccb42f.exe
Resource
win10v2004-20240226-en
General
-
Target
b896768cb05a25e77ca77489d5ccb42f
-
Size
97KB
-
MD5
b896768cb05a25e77ca77489d5ccb42f
-
SHA1
7c2a28df92d334e253e4384153873d6914ba622b
-
SHA256
ddc0dd31ba3b6558bc6d7c5fa67f6660dbb9d089fc5e49b474b30a937457e3d5
-
SHA512
b60579f7aa34f3393ba08dcf6b529076db523724f48c6e8ccbc74d87debc5a660c99606cddea0a77635369a9689c3440ffcc8eb83ebade79c8ee6009bfd9feba
-
SSDEEP
1536:+aeNmhSkCVR7ZhSn5TnhSVg645zkB1mCofskJ/yS5fuI9psJ8cQhnFbqb2x6PfuY:+aeXviZsb45zsW//f1ob8ntxsfuUXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b896768cb05a25e77ca77489d5ccb42f
Files
-
b896768cb05a25e77ca77489d5ccb42f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 480KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ