Static task
static1
Behavioral task
behavioral1
Sample
b30934e1cdeb970287c35ac41359e2b9f5eb4b48e7f7bcf390654423d3bbfcbaN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b30934e1cdeb970287c35ac41359e2b9f5eb4b48e7f7bcf390654423d3bbfcbaN.exe
Resource
win10v2004-20240802-en
General
-
Target
b30934e1cdeb970287c35ac41359e2b9f5eb4b48e7f7bcf390654423d3bbfcbaN
-
Size
57KB
-
MD5
efc76fc0d862431b24ffa7bf9446c3f0
-
SHA1
301ea25f9fea3bb1c67556b0eac44bd8024f8c28
-
SHA256
b30934e1cdeb970287c35ac41359e2b9f5eb4b48e7f7bcf390654423d3bbfcba
-
SHA512
6267d564e1540dbeed547dfe1582eac085df770fd7e52f96fdba3c0940a4f174c0dd72d9d19e471d45b5263fd8246c9277e96edd8667c833276685e2849258fb
-
SSDEEP
768:QuQuk9j9xUGH3jEfzunD/QD3vPkbmPKMa0QbY7ZiNa+VC9/oSgYty/1H56SHXdnq:QuQuk5dHw72zW3vPkeKMDdk+9/mYtwd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b30934e1cdeb970287c35ac41359e2b9f5eb4b48e7f7bcf390654423d3bbfcbaN
Files
-
b30934e1cdeb970287c35ac41359e2b9f5eb4b48e7f7bcf390654423d3bbfcbaN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ