Static task
static1
Behavioral task
behavioral1
Sample
bb8022fd9d548f4273c0c7bad8cbf8c5c1509ee2bcb29ced849b7313c5e9ee61.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bb8022fd9d548f4273c0c7bad8cbf8c5c1509ee2bcb29ced849b7313c5e9ee61.exe
Resource
win10v2004-20240226-en
General
-
Target
bb8022fd9d548f4273c0c7bad8cbf8c5c1509ee2bcb29ced849b7313c5e9ee61
-
Size
847KB
-
MD5
06f6a573d0c56704982b8d015aa07132
-
SHA1
5dff39fe0a7867dfe7b2b43bc8fc37f029211f0b
-
SHA256
bb8022fd9d548f4273c0c7bad8cbf8c5c1509ee2bcb29ced849b7313c5e9ee61
-
SHA512
61ae3b84e2007263275aa3827ab086fe2a268a2d7dcd74a1286bc129db9c8cb2530f8b7e4ac9eefdc0ed5d1a61c7a691513cd91e8b0b602f8c0b0ed16e1e8ed0
-
SSDEEP
24576:rvb51dZ5EwcNxI7OfnoFpnygKpo/anv/7Wr+MZ:rlDZ5ExQ78oFpyf7nn6iMZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb8022fd9d548f4273c0c7bad8cbf8c5c1509ee2bcb29ced849b7313c5e9ee61
Files
-
bb8022fd9d548f4273c0c7bad8cbf8c5c1509ee2bcb29ced849b7313c5e9ee61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ropf Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ