Static task
static1
Behavioral task
behavioral1
Sample
b71d2782684b8eadba30aa37dd0ad26a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b71d2782684b8eadba30aa37dd0ad26a.exe
Resource
win10v2004-20231215-en
General
-
Target
b71d2782684b8eadba30aa37dd0ad26a
-
Size
176KB
-
MD5
b71d2782684b8eadba30aa37dd0ad26a
-
SHA1
d741f3a6d2611b037ab9faab1a864a87ac4be057
-
SHA256
48b502e7f8ae7265cc194652fb97a9a27de354a6314c57805c81e1895d9db9ff
-
SHA512
66a4edbb05f256d76e0b3c6abcfe583ee182d4307288c0171e76d0e2f760ccad4211556a6244158dc4b8fb150dc41cb8b47f946cb2c600e8503bbbf44de1e063
-
SSDEEP
3072:xBA7D9seX8h0S8a2eHaEy032yaCMMq9FIUPv9XOVw1FaX6lwzmOJfYerMMq9FIUa:xG7D9sSa6E4f9FIUpOVw86CmOJfTo9Fe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b71d2782684b8eadba30aa37dd0ad26a
Files
-
b71d2782684b8eadba30aa37dd0ad26a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ