Static task
static1
Behavioral task
behavioral1
Sample
b51bcfeaa4fb9f3bb6071e7836fe4c2fae862f828fc6ce85625a9be1b4fdd538.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b51bcfeaa4fb9f3bb6071e7836fe4c2fae862f828fc6ce85625a9be1b4fdd538.exe
Resource
win10v2004-20240802-en
General
-
Target
b51bcfeaa4fb9f3bb6071e7836fe4c2fae862f828fc6ce85625a9be1b4fdd538
-
Size
320KB
-
MD5
d50f39388b2de3c968f91218f0e588c4
-
SHA1
de93d32ec126e9ce4bb6ea91e8773057dddd6bb7
-
SHA256
b51bcfeaa4fb9f3bb6071e7836fe4c2fae862f828fc6ce85625a9be1b4fdd538
-
SHA512
baced0bbabf3d98d7cba269543f18f502b0d2740356b08ee889b6498628e47c6645a5911a9f55ff1f7b1101388c839c7331b7285fa82ec7477c5731465653673
-
SSDEEP
6144:8UORK1ttbV3kSobTYZGiNdnijoh+EiIt4f/q6mXWo2X:8ytbV3kSoXaLnyosHqMCfWo2X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b51bcfeaa4fb9f3bb6071e7836fe4c2fae862f828fc6ce85625a9be1b4fdd538
Files
-
b51bcfeaa4fb9f3bb6071e7836fe4c2fae862f828fc6ce85625a9be1b4fdd538.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE