Static task
static1
Behavioral task
behavioral1
Sample
be1935b8da65478e3429f8de60d9de60N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
be1935b8da65478e3429f8de60d9de60N.exe
Resource
win10v2004-20240802-en
General
-
Target
be1935b8da65478e3429f8de60d9de60N.exe
-
Size
664KB
-
MD5
be1935b8da65478e3429f8de60d9de60
-
SHA1
e1c4ab6b6abb18e73900a1db5151ec80f8baef79
-
SHA256
36063e078eeda7fe3fe7589e66f72585cc8ee6c3254921df14d571bf7e1f7a76
-
SHA512
729d4cb977f54ee5bbe0e491c65e52ced5b939b6115d3c824dd8c2bd8aec7599d4f5cb6e0acee403252c47a1de5249c7b9c551f32d40e90c2fb71e5d741ef574
-
SSDEEP
12288:Q9EkxpV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54:Q9EkxWVWleKWNUir2MhNl6zX3w9As/xi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be1935b8da65478e3429f8de60d9de60N.exe
Files
-
be1935b8da65478e3429f8de60d9de60N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ