Static task
static1
Behavioral task
behavioral1
Sample
be0a2fe6b904f860c65add5f971091f6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be0a2fe6b904f860c65add5f971091f6.exe
Resource
win10v2004-20240226-en
General
-
Target
be0a2fe6b904f860c65add5f971091f6
-
Size
191KB
-
MD5
be0a2fe6b904f860c65add5f971091f6
-
SHA1
a62641cf488e8a61e377b246de2ebb403eb215b0
-
SHA256
784fe2613f7c75571ea9950aa22b783fe87a43014a8525dfe7d392da434185d0
-
SHA512
f15be2565976bf7936d5c5c7d667c143800bc15fc3e686667a7459a912dbd47c1b1e40e8d026b8faae4b62c02f9c4f55011043d6a13a8ddf692d4ad00cb32c2c
-
SSDEEP
3072:bXZc3k0aJDQAQmYKxThZcMrTgQvSRA4ebXgAZ4+2Q7glYe+34ot7PqkS/:UaJUJ020ZJrgAm+2Qf4cK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be0a2fe6b904f860c65add5f971091f6
Files
-
be0a2fe6b904f860c65add5f971091f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.61e$pj Size: 1KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ks8fog Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 715.0MB
.rdata Size: 75KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE