Static task
static1
Behavioral task
behavioral1
Sample
b0202dab5c17de9cf249819c2b4853a22477d0243f2d022c2d05d89f36dd0880.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b0202dab5c17de9cf249819c2b4853a22477d0243f2d022c2d05d89f36dd0880.exe
Resource
win10v2004-20240802-en
General
-
Target
b0202dab5c17de9cf249819c2b4853a22477d0243f2d022c2d05d89f36dd0880
-
Size
13.2MB
-
MD5
4da84636c6b4c8656219f86df58175a5
-
SHA1
b682f3a08a21b18101581f9ad07ea80804e13c76
-
SHA256
b0202dab5c17de9cf249819c2b4853a22477d0243f2d022c2d05d89f36dd0880
-
SHA512
6944159fc7163d4535a07eef10fb03fe8d070d1ba5e675bfdc5300473909855239662f6b40ab1c08d0aef32c7a62415d991bd690bf2a37228424a9d63409e9a9
-
SSDEEP
196608:1k3oowGEtLx/W1rHULnPeEVka1h7sf7pWJVuouXQv:BLx/W9UyEVp77sf7pWSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0202dab5c17de9cf249819c2b4853a22477d0243f2d022c2d05d89f36dd0880
Files
-
b0202dab5c17de9cf249819c2b4853a22477d0243f2d022c2d05d89f36dd0880.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 877B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE