Static task
static1
Behavioral task
behavioral1
Sample
bef26370c4598cbdf8a4ca61b7be62e5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bef26370c4598cbdf8a4ca61b7be62e5.exe
Resource
win10v2004-20231215-en
General
-
Target
bef26370c4598cbdf8a4ca61b7be62e5
-
Size
1024B
-
MD5
bef26370c4598cbdf8a4ca61b7be62e5
-
SHA1
d90d554b61b07b61e15a76b413f8769ed34bba5c
-
SHA256
629c4aeac7089ec0428dea9367f460a3adce64f5f73af266e9e8b93a6cfe6128
-
SHA512
935998a513c6d4556eebb17fd6ecd9c0790394ddf78f921ad6b03b542e70976c2541af5699d9c35b03ab624838c3eb0aeac888278b024196417583b085113e30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bef26370c4598cbdf8a4ca61b7be62e5
Files
-
bef26370c4598cbdf8a4ca61b7be62e5.exe windows:4 windows x86 arch:x86
cb9b94bf7f5e065f918047c8fe1b45d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
GetTempPathA
GlobalAlloc
LoadLibraryA
WinExec
lstrcatA
lstrlenA
Sections
.text Size: 544B - Virtual size: 534B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ