Static task
static1
Behavioral task
behavioral1
Sample
0a898c27b91af7ecb4259f2710a707ec7788503d5d16a27ad51a7323eef3a708.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0a898c27b91af7ecb4259f2710a707ec7788503d5d16a27ad51a7323eef3a708.exe
Resource
win10v2004-20230915-en
General
-
Target
0a898c27b91af7ecb4259f2710a707ec7788503d5d16a27ad51a7323eef3a708
-
Size
2.9MB
-
MD5
22a36e7a5105e43a1502f1124f93feaa
-
SHA1
d3fd4aaa10b0b6f513be995e99b1fa0cfe0ed0dd
-
SHA256
0a898c27b91af7ecb4259f2710a707ec7788503d5d16a27ad51a7323eef3a708
-
SHA512
b2ea9a9e31396427b53efcabcebe62af104d732c33baa39c35572be4227d1fe03b9f26fb5fb9f59c87de921c32d36df8f871d04e021b266ab26d6a2120ffa8e7
-
SSDEEP
49152:h3x0suchdxggbhxrzST1XwNxXhUaSiti1qCtpNA7To2Zo1LTVhpf8Xn3dUJPxZ6c:h8udxpxfSpQRhlzCt7A79ZoRTbpfctFc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a898c27b91af7ecb4259f2710a707ec7788503d5d16a27ad51a7323eef3a708
Files
-
0a898c27b91af7ecb4259f2710a707ec7788503d5d16a27ad51a7323eef3a708.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.3MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ