Static task
static1
Behavioral task
behavioral1
Sample
b1d3ea98f8e80bd4c2d926b48e73c750N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1d3ea98f8e80bd4c2d926b48e73c750N.exe
Resource
win10v2004-20240802-en
General
-
Target
b1d3ea98f8e80bd4c2d926b48e73c750N
-
Size
1.3MB
-
MD5
b1d3ea98f8e80bd4c2d926b48e73c750
-
SHA1
cb001367318a5d84e008474f922ac64164348ebe
-
SHA256
a1ebb1cd743146e6b421f6b6675cf949f0eb1961e5a9ec2ea74252b152311b2a
-
SHA512
5b9bc102c70ff0ca665ea9747f30b339a02f414dde287925907125af932db5803ce051ec9740611abec27883e6bb58e05114667d7b180bd155a7bd12f99cf0fb
-
SSDEEP
24576:2wJivACLmiZisufjOLG6OTG8HetQiF+EjbX7WO/in1mUVHrMoO/6ooGKb/a3:hIvA0m1scU8a8HeWiYkSWi1muH9mwGKE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1d3ea98f8e80bd4c2d926b48e73c750N
Files
-
b1d3ea98f8e80bd4c2d926b48e73c750N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE