Static task
static1
Behavioral task
behavioral1
Sample
b297a8385de4fe0dbd2e7cde2ce547f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b297a8385de4fe0dbd2e7cde2ce547f0N.exe
Resource
win10v2004-20240709-en
General
-
Target
b297a8385de4fe0dbd2e7cde2ce547f0N.exe
-
Size
613KB
-
MD5
b297a8385de4fe0dbd2e7cde2ce547f0
-
SHA1
7593a321c6b9cf8742a1a36661233bd7ab61c3b8
-
SHA256
8923d3e4c93fe88fdb073a8968625309b1cb7c96a0a1e716301dc979f5a1a11d
-
SHA512
6ea396f0db87588b5c584c5ba3b3f4e7e202589b6e7b1f05c49a6a70a6ccb44175f53489aba21a8ae5065292b0951d98bf7f2063dd445f95c568cd1d04b5db9a
-
SSDEEP
12288:i12adQOt4yvruSztFNYGY0Cu16FRnE1oMWvHcp+:khJKgNYGjQPMWv2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b297a8385de4fe0dbd2e7cde2ce547f0N.exe
Files
-
b297a8385de4fe0dbd2e7cde2ce547f0N.exe.exe windows:4 windows x86 arch:x86
8daa186e7a8b61e87dbdc8c6e0429d71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlTraceDatabaseCreate
user32
GetKBCodePage
GetCaretBlinkTime
Sections
.text Size: 606KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE