Static task
static1
Behavioral task
behavioral1
Sample
0b3b21d029fbc5e327addfafcd2f6e5a66358d6e74fbfb684596fe80d6adea42.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0b3b21d029fbc5e327addfafcd2f6e5a66358d6e74fbfb684596fe80d6adea42.exe
Resource
win10v2004-20230915-en
General
-
Target
0b3b21d029fbc5e327addfafcd2f6e5a66358d6e74fbfb684596fe80d6adea42
-
Size
598KB
-
MD5
b8e817b6f6e4a1389d92af633e2cf7e4
-
SHA1
629652ba60e3604a74a798d10470c93cd2e99d23
-
SHA256
0b3b21d029fbc5e327addfafcd2f6e5a66358d6e74fbfb684596fe80d6adea42
-
SHA512
a76cea29bf3102915edeb38a04e1341de17ae9824e032cff93c64520b03bf3619297c7d64dad9cd891fdb118690011ec165ffbf3e34516ddd335f320a4dfdce0
-
SSDEEP
6144:OsPQ0gDf8sGQ7xDPz4lTpudcQQ6gF9CPRgn2LtEef4V4ksBFF5WJ+iKbZVvT+ek:OhwKH4ldug6gFEP23K4L+nbZVvRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b3b21d029fbc5e327addfafcd2f6e5a66358d6e74fbfb684596fe80d6adea42
Files
-
0b3b21d029fbc5e327addfafcd2f6e5a66358d6e74fbfb684596fe80d6adea42.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 583KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ