Static task
static1
Behavioral task
behavioral1
Sample
bb230efeaf6d6317f04368618ac823d2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb230efeaf6d6317f04368618ac823d2.exe
Resource
win10v2004-20231215-en
General
-
Target
bb230efeaf6d6317f04368618ac823d2
-
Size
115KB
-
MD5
bb230efeaf6d6317f04368618ac823d2
-
SHA1
83aa4e645d4c78e128012449fc1178202a8cb31d
-
SHA256
ee54bb570dd7f0ebc36c2addb44985b9698e4763813549e2af5e9b26d405dbe7
-
SHA512
9e7ee631ca1a2d936887379d8184d41c48063759c34d6eb487cc02540d9ceccdb98e0c83901b3fc03d223afb4c1cc6f4442fdf7ca2123c71618a42979fa8bd68
-
SSDEEP
3072:DWqlKFqk62SueTlOqvMV20jHbvNMWqlNzcz1ZxhRO0IPX4AlNJ:DZ0qL2SH70VPb1/xDhROhQU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb230efeaf6d6317f04368618ac823d2
Files
-
bb230efeaf6d6317f04368618ac823d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
wzw9 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vhqkmjxi Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE