Static task
static1
Behavioral task
behavioral1
Sample
b897b5a2c190a2229b451b7858aa42ed.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b897b5a2c190a2229b451b7858aa42ed.exe
Resource
win10v2004-20240226-en
General
-
Target
b897b5a2c190a2229b451b7858aa42ed
-
Size
264KB
-
MD5
b897b5a2c190a2229b451b7858aa42ed
-
SHA1
acc77091772c8ee5050131b666596520ee12a57b
-
SHA256
6700aafcd1e47c077d76bba6ec8bbc573a8da2aad10d473269839fc085de1b2c
-
SHA512
37592aed9b0abe216b15374f7591eaaf9fa5e3b61df7edcafd7b88a7744e408fbb9ebaab9276db485f716380ec6c50e9f92680749af114a8d1749aa76373accc
-
SSDEEP
6144:xhAgehnpVH0pwpM2EmMCqmeGsoozQ9b9O:7AgehnpVH0pp2yekf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b897b5a2c190a2229b451b7858aa42ed
Files
-
b897b5a2c190a2229b451b7858aa42ed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
0uMRoPmS Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eTgHTU0R Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
boDd7kfZ Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n5CstFeP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uQC8aF5Q Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
boDd7kfZ
-
eTgHTU0R
-
n5CstFeP
-
uQC8aF5Q