Static task
static1
Behavioral task
behavioral1
Sample
b8de06b1bf59d4f58f09ab99f43a9ce4.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
b8de06b1bf59d4f58f09ab99f43a9ce4.exe
Resource
win10v2004-20240226-en
General
-
Target
b8de06b1bf59d4f58f09ab99f43a9ce4
-
Size
169KB
-
MD5
b8de06b1bf59d4f58f09ab99f43a9ce4
-
SHA1
6e9cb5c52ee57283b3f5fc8d5aa19a012153e20e
-
SHA256
a278b332398e5504f22a6ca21437dffa38ca4b00a4d7cbfe28782db0b6678d41
-
SHA512
8ffbadbec031c0288d9e3af09424131e41879093c1a68adc87704b2819c9d6d1dbf80f9e25f31f9727b6a34f71195f34575eae07d45eb192f476930159fafa1a
-
SSDEEP
3072:7W6h6Y6DxQKBL+UjcvS5is6vZX5Kv8S138WtA7Kzfk0saREs:7W6h6NR+Uw80g9XA78fJsaREs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8de06b1bf59d4f58f09ab99f43a9ce4
Files
-
b8de06b1bf59d4f58f09ab99f43a9ce4.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 160KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE