Static task
static1
Behavioral task
behavioral1
Sample
b4ca6c7215c0b805b6d37fda0bdcfdb6aeffc4c69baa848588d107db02b6d93a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4ca6c7215c0b805b6d37fda0bdcfdb6aeffc4c69baa848588d107db02b6d93a.exe
Resource
win10v2004-20240319-en
General
-
Target
b4ca6c7215c0b805b6d37fda0bdcfdb6aeffc4c69baa848588d107db02b6d93a
-
Size
562KB
-
MD5
2e1632b94e840709a4832905afa8eb38
-
SHA1
ca73769f46f9d3d30680abf2af17f30e51ea299f
-
SHA256
b4ca6c7215c0b805b6d37fda0bdcfdb6aeffc4c69baa848588d107db02b6d93a
-
SHA512
1063baacacd51a0acfae5de8d3208a99ef5bdc1965aa4d8488d6e0ae112808e4fbeb06337e17e60f99a5763ee97ba554d6bb840a16aa83bc87936ac19f7f2deb
-
SSDEEP
3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx7:dqDAwl0xPTMiR9JSSxPUKYGdodHu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4ca6c7215c0b805b6d37fda0bdcfdb6aeffc4c69baa848588d107db02b6d93a
Files
-
b4ca6c7215c0b805b6d37fda0bdcfdb6aeffc4c69baa848588d107db02b6d93a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 245KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE