Hai
Static task
static1
Behavioral task
behavioral1
Sample
0b8b8d7b1ef606a16e1ffca7b7360be53ecde5b13ebcd6e87799217ec825999a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0b8b8d7b1ef606a16e1ffca7b7360be53ecde5b13ebcd6e87799217ec825999a.exe
Resource
win10v2004-20231020-en
General
-
Target
0b8b8d7b1ef606a16e1ffca7b7360be53ecde5b13ebcd6e87799217ec825999a
-
Size
1.3MB
-
MD5
c7f00b43c93376d55c36420a5a2d2da1
-
SHA1
3dc8a92d5e8a9c93f336a5c29a34f7f49098d09e
-
SHA256
0b8b8d7b1ef606a16e1ffca7b7360be53ecde5b13ebcd6e87799217ec825999a
-
SHA512
010aa69435e778a72024b3444a3f6a3c9592d55cb616f7dfe3848abb9392d27a49f25d480660ac07f00d4873b1338233b4817a3c737fb8b4c15d59d8b075b99b
-
SSDEEP
24576:dbBVxBN7v/KCEmo3rMKTGx8mG10/7mG10/V3Zs3:9FrK5dy8mGo7mGoV2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b8b8d7b1ef606a16e1ffca7b7360be53ecde5b13ebcd6e87799217ec825999a
Files
-
0b8b8d7b1ef606a16e1ffca7b7360be53ecde5b13ebcd6e87799217ec825999a.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 388KB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 370KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 299KB - Virtual size: 300KB
IMAGE_SCN_MEM_READ
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ