Static task
static1
Behavioral task
behavioral1
Sample
0b132d79c1b0e2ce1ef6035f2104406c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b132d79c1b0e2ce1ef6035f2104406c.exe
Resource
win10v2004-20231215-en
General
-
Target
0b132d79c1b0e2ce1ef6035f2104406c
-
Size
784B
-
MD5
0b132d79c1b0e2ce1ef6035f2104406c
-
SHA1
1510e41f75b9e804b4f633d20ba092190f79f75f
-
SHA256
4d739106e888008affa5574524e975d50603cad5e1bfea1075e2cc8462a940cb
-
SHA512
700deef7622b9384f2280b5beeebe40b87b1ea371439e7a194c15b50d81d384ca51c3fbf45461bfa41b7cfdedd7e9d81781869becf1e3dfc157f80079203ef21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b132d79c1b0e2ce1ef6035f2104406c
Files
-
0b132d79c1b0e2ce1ef6035f2104406c.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ