Static task
static1
Behavioral task
behavioral1
Sample
b857fc2d13cc065a58aadf417f24c07588782725bd71237b1727b7d63cca05b5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b857fc2d13cc065a58aadf417f24c07588782725bd71237b1727b7d63cca05b5.exe
Resource
win10v2004-20240508-en
General
-
Target
b857fc2d13cc065a58aadf417f24c07588782725bd71237b1727b7d63cca05b5
-
Size
603KB
-
MD5
e5505e6bbd61e35f3fe5f871e0054c58
-
SHA1
2a948fbef7ddf7ddea9de8339e1532269dad365d
-
SHA256
b857fc2d13cc065a58aadf417f24c07588782725bd71237b1727b7d63cca05b5
-
SHA512
2f41e29918f36436c6c8a01813ebf60cb0171d65a30bc0952d8d6a072a4180bc1c81d9c73f4a74dbe0cf25ef9154a60e36585d6fb4c61c7a27b8f61520887731
-
SSDEEP
12288:AJ0WABPykvWlZbr4q+f3ABLpcCjniwqDIRmg6rUNB9cLs2BZkGETQOngYbiCK9gT:AJjaPyLlZUqZBPnUD/g/39OHdETQZZCb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b857fc2d13cc065a58aadf417f24c07588782725bd71237b1727b7d63cca05b5
Files
-
b857fc2d13cc065a58aadf417f24c07588782725bd71237b1727b7d63cca05b5.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ