Static task
static1
Behavioral task
behavioral1
Sample
b884885b9057dc5eccea39cd000079be.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b884885b9057dc5eccea39cd000079be.exe
Resource
win10v2004-20240226-en
General
-
Target
b884885b9057dc5eccea39cd000079be
-
Size
138KB
-
MD5
b884885b9057dc5eccea39cd000079be
-
SHA1
15b96fc4e155d20c15697652a58a3efd71844c74
-
SHA256
574b2e255aad1b0887933f0bde877deb2a1add99c82b7d2f787d93145851179d
-
SHA512
4ade84b549226f9bdb50514df3cbc3ba1f0e9f9db23201c4209b30cf52ed58e4f99446a7fa5beaa40468dec15e313d5b74021872577fa5d1d0eff7130af1a29d
-
SSDEEP
3072:/kjAJ/6oC9l81Vjbhzy58ghhtIGMmHRzvrGJhjBDCLFQIG:/kjY/n1VjbhbghhtIGfsBDkQI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b884885b9057dc5eccea39cd000079be
Files
-
b884885b9057dc5eccea39cd000079be.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ