Static task
static1
Behavioral task
behavioral1
Sample
b2d279b57cd3f48a7705afb7a8c9e41d38b53de8f836038f3742cfb3ea1ad68d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b2d279b57cd3f48a7705afb7a8c9e41d38b53de8f836038f3742cfb3ea1ad68d.exe
Resource
win10v2004-20240419-en
General
-
Target
b2d279b57cd3f48a7705afb7a8c9e41d38b53de8f836038f3742cfb3ea1ad68d
-
Size
64KB
-
MD5
46415ffe9917114aea25449876c61f4b
-
SHA1
c2e2b8c023e8fea1f4544c3204c42b1f0f082d72
-
SHA256
b2d279b57cd3f48a7705afb7a8c9e41d38b53de8f836038f3742cfb3ea1ad68d
-
SHA512
50db64576fdb12753a0fc81d752ce041e7ba2c58179e1ad686c0e95b819d73597e78af7d42f02596cba63c418d8f344635698f0d1889ca3113c70272d8c36de6
-
SSDEEP
1536:v3J8HSJ2h9g99zKZeFpuR4cUXruCHcpzt/Idn:v36SIh9gffrGfpFwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2d279b57cd3f48a7705afb7a8c9e41d38b53de8f836038f3742cfb3ea1ad68d
Files
-
b2d279b57cd3f48a7705afb7a8c9e41d38b53de8f836038f3742cfb3ea1ad68d.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ