Static task
static1
Behavioral task
behavioral1
Sample
0b4f95402c2cd2feac6b967be37dcd2c9bf196df96b4b15f92d335641ee11e86.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0b4f95402c2cd2feac6b967be37dcd2c9bf196df96b4b15f92d335641ee11e86.exe
Resource
win10v2004-20230831-en
General
-
Target
0b4f95402c2cd2feac6b967be37dcd2c9bf196df96b4b15f92d335641ee11e86
-
Size
6.3MB
-
MD5
1ce432f1a82eb672a2dba280bd157d6e
-
SHA1
a8d978682b82c14a0b32b7a27de20f5cf6841e12
-
SHA256
0b4f95402c2cd2feac6b967be37dcd2c9bf196df96b4b15f92d335641ee11e86
-
SHA512
c62eaf7bb7d8d260381d2e64c2fc65dfcc5080320ce172b60c4e52e354b2f614274956f843deb0a75994612c55f3417f993b0518445a0757bec96efdfda6c0fe
-
SSDEEP
196608:yH2fzYF61VIBQkXqdJhj4H/qezUvJJjyvTRwOj:yWfza61VIBQkXqdJhj4HyezUv7u1wOj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b4f95402c2cd2feac6b967be37dcd2c9bf196df96b4b15f92d335641ee11e86
Files
-
0b4f95402c2cd2feac6b967be37dcd2c9bf196df96b4b15f92d335641ee11e86.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iaejjuku Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehfxhtxy Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE