Static task
static1
Behavioral task
behavioral1
Sample
bed8488cf79e3ff69c2ec8e6ac270e465497685689d8c6286e5d7e7a964fb637.exe
Resource
win7-20240221-en
General
-
Target
bed8488cf79e3ff69c2ec8e6ac270e465497685689d8c6286e5d7e7a964fb637
-
Size
312KB
-
MD5
2ba6c70af39e45fd1bad768d7a4988c1
-
SHA1
513dd131d255b5103552cb3a25a797ebabc31e11
-
SHA256
bed8488cf79e3ff69c2ec8e6ac270e465497685689d8c6286e5d7e7a964fb637
-
SHA512
093b8727d503129f41f63da81a3db3bab20a533767a752a893ad4b92398bbfe6e7d513a514d8853ac9adac783a01d12f55be7d2bfaf4d7093c7cf25e1d21bab8
-
SSDEEP
6144:n3C9BRo/AIX2h97aUzpbBj3+b2ziJC39QS8hDJd+Q7ZLbjwZ:n3C9uDC97aUFbZ42ziM39QS8hDJd+Q7A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bed8488cf79e3ff69c2ec8e6ac270e465497685689d8c6286e5d7e7a964fb637
Files
-
bed8488cf79e3ff69c2ec8e6ac270e465497685689d8c6286e5d7e7a964fb637.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ