Static task
static1
Behavioral task
behavioral1
Sample
be1000f2c25c51caa6b6e7c658b52a18.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
be1000f2c25c51caa6b6e7c658b52a18.exe
Resource
win10v2004-20240226-en
General
-
Target
be1000f2c25c51caa6b6e7c658b52a18
-
Size
210KB
-
MD5
be1000f2c25c51caa6b6e7c658b52a18
-
SHA1
b35ff688310fbd040b6f23512bb24086fb02631a
-
SHA256
ca81bfbf7305b6f9102ad07360f85578d5056f1aac314aae5c534e412497fe00
-
SHA512
292226c436ad8dba989fcf4239e463858d1174cc67a7f9061aaabc6c8c1100fc88618818baa8a25db2a75883167435437fde452eb7d8f17835892cd037e70675
-
SSDEEP
6144:jTw2tlKBq/dVFbjzjvIWFK/G05ZV7ARqc:ptkApbjzjQYKTcRqc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be1000f2c25c51caa6b6e7c658b52a18
Files
-
be1000f2c25c51caa6b6e7c658b52a18.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 69KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExeS Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE