Static task
static1
Behavioral task
behavioral1
Sample
b97117dfd743f5d34daafe619e251ffd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b97117dfd743f5d34daafe619e251ffd.exe
Resource
win10v2004-20231215-en
General
-
Target
b97117dfd743f5d34daafe619e251ffd
-
Size
5.9MB
-
MD5
b97117dfd743f5d34daafe619e251ffd
-
SHA1
949ed2947df40be0eba837a0bb464b2c13429004
-
SHA256
5e5b6648042103ecf8a9eb7aa481b26fcaa9938d54ee1867f381850686c3b832
-
SHA512
324232ac46e62df99842bfde115817a15a91bff5c178bae0531bb1e0ad641bebc22d51fae4b7e8caf297d2b744cfdc37f4c526a0425d4d492ac5f325fc59a29f
-
SSDEEP
98304:KFYgTtQ2pwaHgZ86KNSwd+kIS2cXfex3M6mJvuAhDG8RerylpzZ9OIoZj+:KHGaVhd+5ZR3IJGF8Reelj9boA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b97117dfd743f5d34daafe619e251ffd
Files
-
b97117dfd743f5d34daafe619e251ffd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 408KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.8MB - Virtual size: 21.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pwsiiyhf Size: 1012KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfugjmyk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE