Static task
static1
Behavioral task
behavioral1
Sample
b1976d42f93346efeab71af5c5d07d9a26097887d71f5880dbd3475b7c40f811N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b1976d42f93346efeab71af5c5d07d9a26097887d71f5880dbd3475b7c40f811N.exe
Resource
win10v2004-20240802-en
General
-
Target
b1976d42f93346efeab71af5c5d07d9a26097887d71f5880dbd3475b7c40f811N
-
Size
69KB
-
MD5
48b4b99ffd1b31e7d7e25b18783251a0
-
SHA1
4041240d939dfe5be9bcf7e4a83a355e6668fd70
-
SHA256
b1976d42f93346efeab71af5c5d07d9a26097887d71f5880dbd3475b7c40f811
-
SHA512
4690af2fb317fbd33a9c56b2d66ea395666a4dffd29b702763ff6d7f7989e9503f1be2e9c16d781a63843006044c9136e9931f2c0c9364875a31c68a65c7b651
-
SSDEEP
768:ZwU2o2D1x5lD8jIIg7b6G8Lv7r9EaEpEvvvvvvvv5M0NG/1H5R+t2Ymtxj0UDYFI:eRx/D8+WdfpEj0NsO2Nein/GFZCeDAyY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1976d42f93346efeab71af5c5d07d9a26097887d71f5880dbd3475b7c40f811N
Files
-
b1976d42f93346efeab71af5c5d07d9a26097887d71f5880dbd3475b7c40f811N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ