Static task
static1
Behavioral task
behavioral1
Sample
bb4b7167167f88a1a8af8c57999e35b4.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bb4b7167167f88a1a8af8c57999e35b4.exe
Resource
win10v2004-20231215-en
General
-
Target
bb4b7167167f88a1a8af8c57999e35b4
-
Size
656KB
-
MD5
bb4b7167167f88a1a8af8c57999e35b4
-
SHA1
2a8948429fb439354529daab6cc3a476053ce671
-
SHA256
8e9e55d4a62755f77460fb60ee0865907ae3f8b8c248a3825b33cd5169b5f1da
-
SHA512
14d6643c81ce26ad61d47c92798c78bf348f4d9d0e00f48cc548fe70fff7e46fa543058cc0594b613061aea725f2eefee670e7fa16e87ab1ccc3ed6e8d7065cd
-
SSDEEP
6144:Oijyhn4Pkd0fE6/t5SrzJsvcDJ+1bj+o30syf4FmMlTplCRG9DNCrD/egIq0r:OIsneVdVUr9svcDgAsLhVpwRGmrD/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb4b7167167f88a1a8af8c57999e35b4
Files
-
bb4b7167167f88a1a8af8c57999e35b4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 492KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ