Static task
static1
Behavioral task
behavioral1
Sample
b649b687a2fd8dafbdd31365956679f0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b649b687a2fd8dafbdd31365956679f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
b649b687a2fd8dafbdd31365956679f0N
-
Size
79KB
-
MD5
b649b687a2fd8dafbdd31365956679f0
-
SHA1
83662d403554d18f12a015e2f714a3d60d95ce49
-
SHA256
71a20c2bc9e73d18b897aa2000d95aa3e7150e4f6ad921dee5df3b1b35e5b8d8
-
SHA512
1e966f26d468bef29ae4b817bcbdee8c5405c7e77dc8ab6cf85f93bf7c996ad31a631e4b74bdfce283b6387a5d84a862102e186d2c4eda95d5d16644ab0ce58b
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOFm8ZmC6eJbw:GhfxHNIreQm+Hiom8ZmC6eJbw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b649b687a2fd8dafbdd31365956679f0N
Files
-
b649b687a2fd8dafbdd31365956679f0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE