Static task
static1
Behavioral task
behavioral1
Sample
b1bf0f6717341cb605ebf48e85805282b77e5a3d610f211b90e4ec726b448331.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b1bf0f6717341cb605ebf48e85805282b77e5a3d610f211b90e4ec726b448331.exe
Resource
win10v2004-20240226-en
General
-
Target
b1bf0f6717341cb605ebf48e85805282b77e5a3d610f211b90e4ec726b448331.exe
-
Size
383KB
-
MD5
81f2e982687c695ee0bbadf147feca3b
-
SHA1
b33a15b47c3b99c65f2277562a928bf9ce9dabf7
-
SHA256
b1bf0f6717341cb605ebf48e85805282b77e5a3d610f211b90e4ec726b448331
-
SHA512
16461398006e12c7acc47ae87859bc4567405a7fdca2e3d13863cf14b424036c1703d882f30a3e4aa62a2cec9d8c994b6fa823ba8250ec0e6ba35f52ae2ecf05
-
SSDEEP
6144:kz00wubhcFv7g9X7wkDStegoIG2sJnuhLvdHVpHBm/F0kpJVdVpftj7XfLT:kzhBqFv7g9kBVG2ACLvd1pBmN3pJ5plX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1bf0f6717341cb605ebf48e85805282b77e5a3d610f211b90e4ec726b448331.exe
Files
-
b1bf0f6717341cb605ebf48e85805282b77e5a3d610f211b90e4ec726b448331.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ