Static task
static1
Behavioral task
behavioral1
Sample
97a3bc158ac5a24cdb7f01dd6073a6744e700a97142d2b92ed8aa94594832464.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
97a3bc158ac5a24cdb7f01dd6073a6744e700a97142d2b92ed8aa94594832464.exe
Resource
win10v2004-20230915-en
General
-
Target
97a3bc158ac5a24cdb7f01dd6073a6744e700a97142d2b92ed8aa94594832464
-
Size
307KB
-
MD5
c6c0313660d50a9d76b0ca3acfc47e8c
-
SHA1
565c0b73cb68d2b0aaf4d9bc5c282184d0bb5b7b
-
SHA256
97a3bc158ac5a24cdb7f01dd6073a6744e700a97142d2b92ed8aa94594832464
-
SHA512
3dc8cadbb6ea8f2c00c49085f80acf7ee2342b9c9b5fb41e6b5105777b9b00b6ccc19146ca551ce05acfb507e877aa940e41ca3cdebceee173c622771b3e2d82
-
SSDEEP
6144:CngTHSpEz4kU7NaSBUP1kpzyt0NeiatIgL/hZRnJVcIl4YwQSxQCkjy2RxTAwT:uxEz4bNaSBO16z8iat7/ZJaI6tQSS9yc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97a3bc158ac5a24cdb7f01dd6073a6744e700a97142d2b92ed8aa94594832464
Files
-
97a3bc158ac5a24cdb7f01dd6073a6744e700a97142d2b92ed8aa94594832464.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Obsidium Size: 512B - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Obsidium Size: 306KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE