Static task
static1
Behavioral task
behavioral1
Sample
0b2504e395524be30aa6edb8a2ece67c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b2504e395524be30aa6edb8a2ece67c.exe
Resource
win10v2004-20231215-en
General
-
Target
0b2504e395524be30aa6edb8a2ece67c
-
Size
329KB
-
MD5
0b2504e395524be30aa6edb8a2ece67c
-
SHA1
a5f9aa827f21d8976641baf30aeab985d131d5cd
-
SHA256
3e2c23368251d05f6707e0cb1848c3993e454f0bb6a7ea382094dc6b1af65dc4
-
SHA512
aab9bdb1b4fa97968c3798ebf9ccb1478d5060da42785050d26ad76eccb51adf7f6dd27ac421c0e1ea9b0504d688d2f94b71dbfc4de5907e8e9e6005a5a7035c
-
SSDEEP
6144:pXJn3awT9jLhXJn3awT9jLYNaF3qnk42wq:pXJn3dT9hXJn3dT9A2wq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2504e395524be30aa6edb8a2ece67c
Files
-
0b2504e395524be30aa6edb8a2ece67c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ