Static task
static1
Behavioral task
behavioral1
Sample
bb3520f987ca01fc42f510e6b95ba52f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bb3520f987ca01fc42f510e6b95ba52f.exe
Resource
win10v2004-20240226-en
General
-
Target
bb3520f987ca01fc42f510e6b95ba52f
-
Size
103KB
-
MD5
bb3520f987ca01fc42f510e6b95ba52f
-
SHA1
70cec0b2d64c3c7b5df347409ddc891cf8a61a27
-
SHA256
8e354a491896c3f0e0c38f9f3210f137f7648d9ba79e40cf3097e9acb87480ba
-
SHA512
d7c2a1e9aa7e02d11f3e3b655f5c31d8ae5c98685d4eb5077f0f750c8770fe7dc9f523d75241b720a837d1d968785c8f7e2af70f299eea0adb0c4bb4068673b9
-
SSDEEP
3072:SB+xPUjflecFidCav7Ref+gJ/jBh9/YsDtb:SBq0adefpJFJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb3520f987ca01fc42f510e6b95ba52f
Files
-
bb3520f987ca01fc42f510e6b95ba52f.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.data Size: - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.decode Size: 102KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE