Static task
static1
Behavioral task
behavioral1
Sample
b2ea51111f8dc82ec7d989d89d68ecd3b02b200b93de36f3c9987c577e687519.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b2ea51111f8dc82ec7d989d89d68ecd3b02b200b93de36f3c9987c577e687519.exe
Resource
win10v2004-20240611-en
General
-
Target
b2ea51111f8dc82ec7d989d89d68ecd3b02b200b93de36f3c9987c577e687519
-
Size
4.6MB
-
MD5
e549d372a6b0d8dfd6e85c9e7a85103d
-
SHA1
20cbe524dc27326ce5103ee1a23fa0f5a8e96696
-
SHA256
b2ea51111f8dc82ec7d989d89d68ecd3b02b200b93de36f3c9987c577e687519
-
SHA512
d0292beac9c5c3a6caeca3905e95abc855c776a2ee77369176ece3571e22a5ba71655518aa22fd6c3c41827d8d5cb413d2e95a6d73b9978e759ae17085e1166c
-
SSDEEP
98304:ItFK7HYTTjBJ7iNtZQ9BD8tr7zd4KEoA5hM9Y8z+Ij7cJH:ZHYdlGQ9etbd4KdAI7c1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2ea51111f8dc82ec7d989d89d68ecd3b02b200b93de36f3c9987c577e687519
Files
-
b2ea51111f8dc82ec7d989d89d68ecd3b02b200b93de36f3c9987c577e687519.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
8lZ#o Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ