Static task
static1
Behavioral task
behavioral1
Sample
b1040e7fcf3020aa97c3efc249b733576da4897e44ea03adaf1fe8f641680fb6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b1040e7fcf3020aa97c3efc249b733576da4897e44ea03adaf1fe8f641680fb6.exe
Resource
win10v2004-20240508-en
General
-
Target
b1040e7fcf3020aa97c3efc249b733576da4897e44ea03adaf1fe8f641680fb6
-
Size
96KB
-
MD5
07a92a73f70ba62493747582afc410f4
-
SHA1
20ab4fe92b1a5bc61684a4c9f4193d8c3c07e3f3
-
SHA256
b1040e7fcf3020aa97c3efc249b733576da4897e44ea03adaf1fe8f641680fb6
-
SHA512
296480e08fb97a3dc5813718ff0b93c0d650343761d0b4b287f1732ef94227134d18dc994192d9947ba5b80cbc9b8a6a46cb89407c13a5cd5880f532a2083785
-
SSDEEP
1536:n+y7cUnvcspxduUyvEIq6ber0Yzml3xMz0VtG4pLg0WENrd/BOmMCMy0QiLiizH9:n+mnksMc50fxvLpLg0WE/5OmMCMyELiY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1040e7fcf3020aa97c3efc249b733576da4897e44ea03adaf1fe8f641680fb6
Files
-
b1040e7fcf3020aa97c3efc249b733576da4897e44ea03adaf1fe8f641680fb6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ