Static task
static1
Behavioral task
behavioral1
Sample
b1f0795bd37fe79a6c8f9d0c56f7caaac150da30b78a0b68d0dd7f969847e571.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b1f0795bd37fe79a6c8f9d0c56f7caaac150da30b78a0b68d0dd7f969847e571.exe
Resource
win10v2004-20240412-en
General
-
Target
b1f0795bd37fe79a6c8f9d0c56f7caaac150da30b78a0b68d0dd7f969847e571
-
Size
59KB
-
MD5
5b0e835b775b842b9feb57ab2931734b
-
SHA1
27c746cc9719f26d73a5194e45ae7bee63e2d91e
-
SHA256
b1f0795bd37fe79a6c8f9d0c56f7caaac150da30b78a0b68d0dd7f969847e571
-
SHA512
497fbdc6e62a12016cba9f4c10b0da12778cfce54315f2e129b87d8b8d8b659a433f8cdfec83f6f3ade558028b1f83beb38a9f95af1c16ecb3a734840583b0a1
-
SSDEEP
768:P1ODKAaDMG8H92RwZNQSw+IlJIJJREIOAEeF1yfl0zGF7UvTHArFgQwCj:dfgLdQAQfhJIJ0IO61wFQGgQwC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1f0795bd37fe79a6c8f9d0c56f7caaac150da30b78a0b68d0dd7f969847e571
Files
-
b1f0795bd37fe79a6c8f9d0c56f7caaac150da30b78a0b68d0dd7f969847e571.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE