Static task
static1
Behavioral task
behavioral1
Sample
bb5f4619f49eff47015811926ae11cb9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb5f4619f49eff47015811926ae11cb9.exe
Resource
win10v2004-20240226-en
General
-
Target
bb5f4619f49eff47015811926ae11cb9
-
Size
101KB
-
MD5
bb5f4619f49eff47015811926ae11cb9
-
SHA1
b2c748ad3fe2589f08edd7e7398aa29242019381
-
SHA256
1c83e01e3c77c2a0311fffb316a6fd5eeb4c4aa8e123aed845bf9d73a7a5a7bb
-
SHA512
d1a2b853ec55858f5d8ace423e2e1207403e776d3f872baf41f89b4857216b07083fd617b6ad45e93d460a509bb2e91f62ec1632d887dbe507d8bab229b72a0a
-
SSDEEP
3072:N+5RthNSGoHzqMnti5j8X7FlLByPgo73L:UtfnoH+T0xlLwg4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb5f4619f49eff47015811926ae11cb9
Files
-
bb5f4619f49eff47015811926ae11cb9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
vbo Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ouvflke Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fh4eo Size: 572B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE