Static task
static1
Behavioral task
behavioral1
Sample
b9845a969efb0c06ddecde31c8390f3a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b9845a969efb0c06ddecde31c8390f3a.exe
Resource
win10v2004-20240226-en
General
-
Target
b9845a969efb0c06ddecde31c8390f3a
-
Size
103KB
-
MD5
b9845a969efb0c06ddecde31c8390f3a
-
SHA1
ecd1d8bbd8fe51c31eacbbf0a0cbf3f28daf41f8
-
SHA256
7d27948f3e216313bc69262bf0df0c656d243b611693b2bd108360e50c577f65
-
SHA512
25d9169d348c87eede7028bfee6a4179b2c803b2616c593328cb3fe8884cc27f9bc397f59e2fff28cf7b3c4d31fa351c3929cbec1dbaff7ba6253cc5595abd26
-
SSDEEP
3072:poSaAtBDFZnHf+VoXkC/c4SkuBLRLsrZ19Eby/Q/gh+OrGW:qAtRFZnlkC0tBtLcZ1QyOgh+a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9845a969efb0c06ddecde31c8390f3a
Files
-
b9845a969efb0c06ddecde31c8390f3a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 185B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE