Static task
static1
Behavioral task
behavioral1
Sample
be11f79548ed5b3537649b886c4467d1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be11f79548ed5b3537649b886c4467d1.exe
Resource
win10v2004-20240226-en
General
-
Target
be11f79548ed5b3537649b886c4467d1
-
Size
907KB
-
MD5
be11f79548ed5b3537649b886c4467d1
-
SHA1
ac95bc31e883a65e947c3c9712d7109f904254f1
-
SHA256
e89e760dc8f2b5ca45bfd3fedf1299091fbcd879e68e28c15beea8fb230e0852
-
SHA512
cd3c95ca9a79b9882ada3a08c337fd5f3f45acd1dfe913fa774ca764fd0bb56743ab0c925d5b40a8d35321ebd6295dca34316bc48bf926cafedd66a48f712e4e
-
SSDEEP
24576:bciITW9Sfs84T4CKBJkk6KQYN81Noa/KTaFGmCJTa/ZS1:oRs8Q4BBJ8BYN/aodNgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be11f79548ed5b3537649b886c4467d1
Files
-
be11f79548ed5b3537649b886c4467d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ