Static task
static1
Behavioral task
behavioral1
Sample
b5588d56b19e5ec92a7753d8f7038990N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5588d56b19e5ec92a7753d8f7038990N.exe
Resource
win10v2004-20240802-en
General
-
Target
b5588d56b19e5ec92a7753d8f7038990N.exe
-
Size
488KB
-
MD5
b5588d56b19e5ec92a7753d8f7038990
-
SHA1
1fb816080737b63c7f07e7402e89c5644e95dc1c
-
SHA256
1f72ad63919b97692d38e4d1a7d0c1f79ffa9cd745a41c9b501b70f3feb0469d
-
SHA512
914834a3f3b89c646eae3f51f8ae6e973b3029cf71cb337ff941aaad0f70a8bde948b2f82e0862ac1b6c5620326884cf02588769093ec380c69bd6bd073306c1
-
SSDEEP
12288:V/Mj/MP/Mx/M7/Mx/M4/MpBE/Mk/M2/M1:VAK2O2HIBEd7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5588d56b19e5ec92a7753d8f7038990N.exe
Files
-
b5588d56b19e5ec92a7753d8f7038990N.exe.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE