Static task
static1
Behavioral task
behavioral1
Sample
0af0b393dbe2268fc07fc39ecadcfb3a8d39fe25e334350dd42e83e5219bdf41.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0af0b393dbe2268fc07fc39ecadcfb3a8d39fe25e334350dd42e83e5219bdf41.exe
Resource
win10v2004-20230703-en
General
-
Target
0af0b393dbe2268fc07fc39ecadcfb3a8d39fe25e334350dd42e83e5219bdf41
-
Size
2.6MB
-
MD5
54bb1aa8ff819c217e95907862bf8983
-
SHA1
9fcd5fa9b76ac793e5e70d767bd2608530a6ffda
-
SHA256
0af0b393dbe2268fc07fc39ecadcfb3a8d39fe25e334350dd42e83e5219bdf41
-
SHA512
820541161539e557099629c0bcb43d0d7665eecb03ae997bd206eafd53b85e0a407824bf682ac447b498ac91109bedacac338a63ac41200f3b9b9ad92546a93a
-
SSDEEP
49152:H72xVBL1hMktz/7DzU62kDogT5FzbJRrudaVZonjpy5aoSi:6xVdth7DzU62k8YJudaVyS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0af0b393dbe2268fc07fc39ecadcfb3a8d39fe25e334350dd42e83e5219bdf41
Files
-
0af0b393dbe2268fc07fc39ecadcfb3a8d39fe25e334350dd42e83e5219bdf41.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE