Static task
static1
Behavioral task
behavioral1
Sample
b265bdcceff2e189aab2f6e184fa4138592110f5bde083e9ac55e579c22bf695.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b265bdcceff2e189aab2f6e184fa4138592110f5bde083e9ac55e579c22bf695.exe
Resource
win10v2004-20240508-en
General
-
Target
b265bdcceff2e189aab2f6e184fa4138592110f5bde083e9ac55e579c22bf695
-
Size
14KB
-
MD5
0ca9e22b9e05a667595b36ac3312154c
-
SHA1
3c4df6b626a235deeb9e71396e9b5e84d928c99e
-
SHA256
b265bdcceff2e189aab2f6e184fa4138592110f5bde083e9ac55e579c22bf695
-
SHA512
0db03bb90ceee54b134b1e68fe1ce0598defac23ff642af4ecc1a8a7af888a12bd8d56cd19344f51d0c48d711a88ba826d18f0e55021fa7365c6e02478aab674
-
SSDEEP
384:0haA4ZVgHwrgODDDDDEvzK+WvDE045Hsdddd:0CZVO2gLrKfAudddd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b265bdcceff2e189aab2f6e184fa4138592110f5bde083e9ac55e579c22bf695
Files
-
b265bdcceff2e189aab2f6e184fa4138592110f5bde083e9ac55e579c22bf695.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ