Static task
static1
Behavioral task
behavioral1
Sample
0288baa77157d857e4a9c873bfe9f492.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0288baa77157d857e4a9c873bfe9f492.exe
Resource
win10v2004-20231222-en
General
-
Target
0288baa77157d857e4a9c873bfe9f492
-
Size
69KB
-
MD5
0288baa77157d857e4a9c873bfe9f492
-
SHA1
e0894e95c8cb47d68a9ebf3546092dc07faca701
-
SHA256
e3d5c882bd5e3a8edc4f3c8c0bb6a66a25505def64c90c14e4128728dbfdc262
-
SHA512
a80b1b39eb44bb1fb116ec6f4c091788b78b2e1a80ed98d0c7d408494dd6cc12b3308f21c3f5d19b456aa006f4100583ce0a8cc92d8b50f274790c348ef9ca7a
-
SSDEEP
1536:4LfnjrVYf6ea9dLSxnuE4xOgYd0A8woRE+YU1u7gzBOlN1:4LfjpYS9dLCulOYAUECpuj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0288baa77157d857e4a9c873bfe9f492
Files
-
0288baa77157d857e4a9c873bfe9f492.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data0 Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE