Static task
static1
Behavioral task
behavioral1
Sample
b859c10654dd51c4ca657a3dc4384daec826a828616be245b7419950126ed9ca.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b859c10654dd51c4ca657a3dc4384daec826a828616be245b7419950126ed9ca.exe
Resource
win10v2004-20240426-en
General
-
Target
b859c10654dd51c4ca657a3dc4384daec826a828616be245b7419950126ed9ca
-
Size
119KB
-
MD5
7186bbba3b95895d51e9b42bc72a7171
-
SHA1
212704b5b20f4449d61e90658b4a1886cca4272e
-
SHA256
b859c10654dd51c4ca657a3dc4384daec826a828616be245b7419950126ed9ca
-
SHA512
f8c31870c576223f76eda576a75f19f00f23ba76bc3845fd52053a265ac650313c273c9e8a11875751fec5f31834604caf9955a52c2699386862f8c782ce0383
-
SSDEEP
1536:Noq41+S5tnCvvLDppppzNoq41+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:V49nC7V4SHwo8soECAKzAde
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b859c10654dd51c4ca657a3dc4384daec826a828616be245b7419950126ed9ca
Files
-
b859c10654dd51c4ca657a3dc4384daec826a828616be245b7419950126ed9ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE