Static task
static1
Behavioral task
behavioral1
Sample
b7b4d5f06394d0d5bf9f5d08929e0639fd52cbdc49a16140a8326956ba6d7057.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b7b4d5f06394d0d5bf9f5d08929e0639fd52cbdc49a16140a8326956ba6d7057.exe
Resource
win10v2004-20240412-en
General
-
Target
b7b4d5f06394d0d5bf9f5d08929e0639fd52cbdc49a16140a8326956ba6d7057
-
Size
261KB
-
MD5
0f5ee9b030bd02b9c004590516c10e50
-
SHA1
8401ab40b0bee41f1a33d81636ec8951ed284260
-
SHA256
b7b4d5f06394d0d5bf9f5d08929e0639fd52cbdc49a16140a8326956ba6d7057
-
SHA512
0e3384b67e723e22c72bb12c2f0466efbc226d810f588a3797c6a7a1fa91841adaaea6514891ca56a043835e69809c7774b40361593e8666fddb4513edba4476
-
SSDEEP
6144:YtxkogeWOWQSE7MnI23PDvjGsoozQ9bVxbYR8f:YtxkogeWOWxEId3rv6kgxy8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b7b4d5f06394d0d5bf9f5d08929e0639fd52cbdc49a16140a8326956ba6d7057
Files
-
b7b4d5f06394d0d5bf9f5d08929e0639fd52cbdc49a16140a8326956ba6d7057.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
jPgdop5k Size: - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
18kKRG8q Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
4qoIeN18 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JrNMxJ8U Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yu3FTdlh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
18kKRG8q
-
4qoIeN18
-
CERTIFICATE
-
JrNMxJ8U
-
yu3FTdlh