Static task
static1
Behavioral task
behavioral1
Sample
0a08a7e66b3f1a4109d4098c08dc70d4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a08a7e66b3f1a4109d4098c08dc70d4.exe
Resource
win10v2004-20231215-en
General
-
Target
0a08a7e66b3f1a4109d4098c08dc70d4
-
Size
493KB
-
MD5
0a08a7e66b3f1a4109d4098c08dc70d4
-
SHA1
a863b04da581e628732504a8a3963a121b7ce6f1
-
SHA256
715cdba90dae2181a28f10a53ea4c0751d010d62367b0c6ef2d2f26f0fb76a68
-
SHA512
95c00595bc300427bb0cc31fe533035a38eeeb92792f5d7c3cdb1afc3d79f7255ac184ced296b21d1a368b00db21b0933245fcb0a4dceee904b52573646fbb02
-
SSDEEP
6144:x2CR3fMdVRPS0NMq+Y5YjnYBwI+mHIqh2VSaSibaaOj5/wk4otRbQDYuDYmG0+uH:rul1qY3HHo8thQcMYmG03Ln4bwx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a08a7e66b3f1a4109d4098c08dc70d4
Files
-
0a08a7e66b3f1a4109d4098c08dc70d4.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ