Static task
static1
Behavioral task
behavioral1
Sample
0b058f05a17e03fc2e44f5dcc875fb2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b058f05a17e03fc2e44f5dcc875fb2e.exe
Resource
win10v2004-20231215-en
General
-
Target
0b058f05a17e03fc2e44f5dcc875fb2e
-
Size
137KB
-
MD5
0b058f05a17e03fc2e44f5dcc875fb2e
-
SHA1
22e7d3d0a3a1d14406d07587c6d24cfa50ba2d7a
-
SHA256
72b3f26488dce1ffd6daeef0cc40d5b5fe17da2ba2744a4410f836b55454cf70
-
SHA512
68a4dcfa98030526690bbb916950d31b79f7ff675231c7b9b9a73187be7a0adb50147c428ff03216b478e3bafe5a140848d0662894ed6019d93a218dc141e758
-
SSDEEP
3072:IpWC4YgBPlGiyllapWC4YgBPlGiyllapWC4YgBPlGiyllp:2WC4YgB9GiyYWC4YgB9GiyYWC4YgB9GV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b058f05a17e03fc2e44f5dcc875fb2e
Files
-
0b058f05a17e03fc2e44f5dcc875fb2e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 35KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE