Static task
static1
Behavioral task
behavioral1
Sample
befaffe511b4624737cf33684ca6e1dd.exe
Resource
win7-20240221-en
General
-
Target
befaffe511b4624737cf33684ca6e1dd
-
Size
96KB
-
MD5
befaffe511b4624737cf33684ca6e1dd
-
SHA1
7a8219e6fc3a9c3eb0a5c30284da0ad7aadfcd89
-
SHA256
76f3debb707a4e398d0b526a80ad869fc0dcb44917d33ed3ba9fd3fcadd60f9c
-
SHA512
c15ce88e682f5f7fbc09a34ae4ef721ad3375c9438dab44660bff6b66261af09afc36e9ac542fe5e70937bfa60dc323f18f65ab5dccfe0622c8f348ef596a512
-
SSDEEP
1536:cNFusSx9qYMhdFHS8qdydo3nTzhYxJA+CwNUtBZVY9v8prvZ584Mp:czS4jHS8q/3nTzePCwNUh4E9vQ4Mp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource befaffe511b4624737cf33684ca6e1dd
Files
-
befaffe511b4624737cf33684ca6e1dd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 87KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE