Static task
static1
Behavioral task
behavioral1
Sample
0fb0f2a44757d8436886dbd7dfa799d548d69ac70c0c797d2f996ad28c7fd657.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
0fb0f2a44757d8436886dbd7dfa799d548d69ac70c0c797d2f996ad28c7fd657.exe
Resource
win10v2004-20230621-en
General
-
Target
0fb0f2a44757d8436886dbd7dfa799d548d69ac70c0c797d2f996ad28c7fd657
-
Size
740KB
-
MD5
2214000027f400beff66a065fd596818
-
SHA1
c01fc22aa0073da728f6ccc3d28293317fb59e74
-
SHA256
0fb0f2a44757d8436886dbd7dfa799d548d69ac70c0c797d2f996ad28c7fd657
-
SHA512
68eaf1e04ef648e021709443bff4f832ba7a963d7a5020aa00040b55b0ada394b7e2944954803efb64e9b501bd2a771bd68d7cd6f7348c4cf6876b4875a5ff5c
-
SSDEEP
12288:MCR4Qxz5twx2FwT4QM1dXXX1XXXJXXXFXXXhXXX4XXX6XXXlXXXpXXXHXXXtXXXu:MCZpk+/QcXXX1XXXJXXXFXXXhXXX4XXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb0f2a44757d8436886dbd7dfa799d548d69ac70c0c797d2f996ad28c7fd657
Files
-
0fb0f2a44757d8436886dbd7dfa799d548d69ac70c0c797d2f996ad28c7fd657.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE