Static task
static1
Behavioral task
behavioral1
Sample
b8ec883de05b5d4c204e1452568f6dda.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b8ec883de05b5d4c204e1452568f6dda.exe
Resource
win10v2004-20240226-en
General
-
Target
b8ec883de05b5d4c204e1452568f6dda
-
Size
2.3MB
-
MD5
b8ec883de05b5d4c204e1452568f6dda
-
SHA1
bbaf33e5e82f05473a1b354fdeb1e36c2a3474fc
-
SHA256
10e283c0e62b49a3290dfb6afacf7144744699d0b81c9f35b602820e4f2dfc89
-
SHA512
1dcc7b92dab681908526c14b31436b1b92f9ae7378f8525f5836b419cc17d119a53ea3e51635c5478552afe8eba00f4dd517f312d913e67a415c30a1137ab773
-
SSDEEP
24576:LzEeJQRlpMIFHDUTBIWri9zEeJQRlpMIFHDUTBIWrit59FF96X0JxQ+:LzEO4PVsiWczEO4PVsiWwZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8ec883de05b5d4c204e1452568f6dda
Files
-
b8ec883de05b5d4c204e1452568f6dda.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ