Static task
static1
Behavioral task
behavioral1
Sample
b89b75a04408c403fa757a4a40292d9a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b89b75a04408c403fa757a4a40292d9a.exe
Resource
win10v2004-20240226-en
General
-
Target
b89b75a04408c403fa757a4a40292d9a
-
Size
48KB
-
MD5
b89b75a04408c403fa757a4a40292d9a
-
SHA1
de757b6fe3363900e53a44cc743b7cda32d0005f
-
SHA256
a29c36e4ef2706eee517c136a45f4d5ba7253406e559d6ccb25821b4cfb730d4
-
SHA512
a1a7ea81a68fd6816af713fd1e2146a735aa0c86c4bd608b27ce19ae46f7e06011fe09f65a3d1af19ddddea198dfc1a71aba728c9400ac339706b83c71d897ac
-
SSDEEP
768:72sLfb9B+Xj7EDliIdwim/gcVtZN3QJIX0jJaOmZVyF7j3bX8LjSmMFvIh9F8ro:72yfb9ouMniU/ZoVjJarZ67X3mDbaro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b89b75a04408c403fa757a4a40292d9a
Files
-
b89b75a04408c403fa757a4a40292d9a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
cl0i0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cl0i1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cl0i2 Size: 665B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE