Static task
static1
Behavioral task
behavioral1
Sample
0b6d6c864ad381d1651da19a7ada03e2f44bf1260715364983c3aad403ec6e18.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0b6d6c864ad381d1651da19a7ada03e2f44bf1260715364983c3aad403ec6e18.exe
Resource
win10v2004-20231023-en
General
-
Target
0b6d6c864ad381d1651da19a7ada03e2f44bf1260715364983c3aad403ec6e18
-
Size
1.2MB
-
MD5
a1ef9acfab2f8452de7d9505244d0151
-
SHA1
96733b186ac3cf3b80f57a1c1332282f10783e01
-
SHA256
0b6d6c864ad381d1651da19a7ada03e2f44bf1260715364983c3aad403ec6e18
-
SHA512
cb29adc0de5e9268cfce0f18361f4055cc88bb969c78a318b36eb93fb19a94253d36207e264fcf9500a1be06cbd45db9ccdded2237bb05e47a27ada61fd2f349
-
SSDEEP
24576:GHXXX/XXXFqIIIcXXX5j2XXXcXXXfXXXxXXXLIII+Ph2kkkkK4kXkkkkkkkkhLXI:G9qIIIUjfIIIAbazR0vKLXZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b6d6c864ad381d1651da19a7ada03e2f44bf1260715364983c3aad403ec6e18
Files
-
0b6d6c864ad381d1651da19a7ada03e2f44bf1260715364983c3aad403ec6e18.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE