Static task
static1
Behavioral task
behavioral1
Sample
bb0ae76120b7422af6cd4e1199ecdd9f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb0ae76120b7422af6cd4e1199ecdd9f.exe
Resource
win10v2004-20240226-en
General
-
Target
bb0ae76120b7422af6cd4e1199ecdd9f
-
Size
151KB
-
MD5
bb0ae76120b7422af6cd4e1199ecdd9f
-
SHA1
b3c2d783107ecfcf288da6af42fac44e34182577
-
SHA256
cecfaeb9570d1706a3d2a59fc97e0025798114cdddcb591694eb967d56c85b4e
-
SHA512
92645a2ee77c462f15c4e929e1c18ec3c65ba98fdfa7a2aa354f9c14452afc137a3c59d16ed407d96c7234edef943f6e606ecb8e821ba22f8c5165fe64f2564f
-
SSDEEP
3072:NR8muhDUEGRl+ltli4UEb8Vt1Wf1sBY5euZ:CC7FvuZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb0ae76120b7422af6cd4e1199ecdd9f
Files
-
bb0ae76120b7422af6cd4e1199ecdd9f.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ