Static task
static1
Behavioral task
behavioral1
Sample
b8544ba9a5413644392904c57913001d88babd969f619c3c33831bf942c2b345.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8544ba9a5413644392904c57913001d88babd969f619c3c33831bf942c2b345.exe
Resource
win10v2004-20240226-en
General
-
Target
b8544ba9a5413644392904c57913001d88babd969f619c3c33831bf942c2b345
-
Size
43KB
-
MD5
ef0a29e6e6363507e4fff88083e810e9
-
SHA1
d36e51f9c7f55277782be73021ef1c2a2f8c05c8
-
SHA256
b8544ba9a5413644392904c57913001d88babd969f619c3c33831bf942c2b345
-
SHA512
1ad4f878c155abff0da800ce1d837536c0237fd4f6c5db9d523592a265f277c44a6466d6616739f5ebe389ec14ff1cd6cb2b11773f42c502c1af6185c82c96c7
-
SSDEEP
768:pox16GVRu1yK9fMnJG2V9dHS8/WQ3655Kv1X/qY1MSd:pM3SHuJV9NDHqaNrFd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8544ba9a5413644392904c57913001d88babd969f619c3c33831bf942c2b345
Files
-
b8544ba9a5413644392904c57913001d88babd969f619c3c33831bf942c2b345.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE