Static task
static1
Behavioral task
behavioral1
Sample
b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14.exe
Resource
win10v2004-20240802-en
General
-
Target
b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14.exe
-
Size
45KB
-
MD5
16451c80f18ca7d30f2ef0760c725315
-
SHA1
3b68f307a518f4992989cdef3c0792a5db9c0088
-
SHA256
b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14
-
SHA512
997792cec7104607152e258e8a3c2c924aa71755fe23b4535b9d3c13da295f56d7faa0b879483f638032a016a6523711383af99fab9718e681adbd9e66b88bbb
-
SSDEEP
768:j/6eAy7Qt0SIyMFKwg9/nBqy0bDiDXSZVixElkg40eO7cQn7DeWq3:z6eAT0zyMtYg7XiDGVwElkg97cQeWq3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14.exe
Files
-
b866fef4739496f6d000c5ac95d774d0515941f4c93f60d3bade20a7a5e0fe14.exe.exe windows:4 windows x86 arch:x86
fc2ca0dd2bd0f0a143659652556a192d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
_iob
advapi32
FreeSid
wsock32
getsockopt
ws2_32
WSARecv
Sections
.MPRESS1 Size: 39KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE