Static task
static1
Behavioral task
behavioral1
Sample
0b6f0639226bf4740f0885147aea8b5172e8ceeebcd7f4461bf17ab08cb7dfa2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0b6f0639226bf4740f0885147aea8b5172e8ceeebcd7f4461bf17ab08cb7dfa2.exe
Resource
win10v2004-20230831-en
General
-
Target
0b6f0639226bf4740f0885147aea8b5172e8ceeebcd7f4461bf17ab08cb7dfa2
-
Size
5.5MB
-
MD5
c29dd17eb201f21766a006f41d962fd9
-
SHA1
229be18330d6ed61e3b164c7da1fc83e923f5442
-
SHA256
0b6f0639226bf4740f0885147aea8b5172e8ceeebcd7f4461bf17ab08cb7dfa2
-
SHA512
f1ab71138fe1c9020b378002eb13ee9e15fd92d0203e6e133dc0f0c162fbc9974f14d6b27d4363a6049137f3b8b27d5ff94d834330d1a048a074a0ad143995a0
-
SSDEEP
98304:IVjX6mlyt/T+fZm5pnopyYXYkjrr7VUVsc212xfhzyqoUmHCe5/IyXBddpTSZk+p:EOmsRLnopxYOPhUVs4zOUmHCe5/lBddq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b6f0639226bf4740f0885147aea8b5172e8ceeebcd7f4461bf17ab08cb7dfa2
Files
-
0b6f0639226bf4740f0885147aea8b5172e8ceeebcd7f4461bf17ab08cb7dfa2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xilou Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE