Static task
static1
Behavioral task
behavioral1
Sample
be0d175ec08da21747210081c52c9aa4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be0d175ec08da21747210081c52c9aa4.exe
Resource
win10v2004-20240226-en
General
-
Target
be0d175ec08da21747210081c52c9aa4
-
Size
54KB
-
MD5
be0d175ec08da21747210081c52c9aa4
-
SHA1
9a6c04a520b1a0b61ad525a10be7af680503a051
-
SHA256
c4b5ba5277717182fc18e6d1a6107dc4e92ea8170553479e393e5bdc90a4a11f
-
SHA512
912e0883820ebe83be56dcf8d845cda1653e002499d25d74168ff831b9d22fb114e840d6454cd7de5f83904e4281789571acf0942bfa362c5c321be53cdd17be
-
SSDEEP
768:bzcHOihrInEuW836+XMEFMvNcsY+dwXh2e2oEYGCAqh19NDm3A3Hg9atQ0NCfmcq:sgEuWlEyVc/3h2PDAu3h9a1NCVDd/Ny
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be0d175ec08da21747210081c52c9aa4
Files
-
be0d175ec08da21747210081c52c9aa4.exe windows:4 windows x86 arch:x86
2a6cf69ec1f2374fb62f74cdeda1d3a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
MoveFileA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE