Static task
static1
Behavioral task
behavioral1
Sample
0b2f5d7e5d1946a49c0bcec46e5c9e0c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b2f5d7e5d1946a49c0bcec46e5c9e0c.exe
Resource
win10v2004-20231215-en
General
-
Target
0b2f5d7e5d1946a49c0bcec46e5c9e0c
-
Size
31KB
-
MD5
0b2f5d7e5d1946a49c0bcec46e5c9e0c
-
SHA1
ce4d1a0716a14efa486155306d2f5ec0581635ea
-
SHA256
e69f61279bd40285aab6ba1d67e29d660b83e72e6c3fa7608c8667537fb8622e
-
SHA512
2e962dba1f1686ac2c5568386b3c28b858c2f6cc8cd41353410e3c1c98c8e160550a120e1fd222c58b01ed1a224da7b86897ddfd3b504ec258953d52f015b89a
-
SSDEEP
768:QVDwIp5mhmEy+AEPVYPbpHfFPPiSwjjBatYRoQdSwxyw:kp5mhmH+fPVObpHfFP/8Fyw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2f5d7e5d1946a49c0bcec46e5c9e0c
Files
-
0b2f5d7e5d1946a49c0bcec46e5c9e0c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 658B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ