Static task
static1
Behavioral task
behavioral1
Sample
0b2684b9bda9e11c3c8e2863bed67c45.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b2684b9bda9e11c3c8e2863bed67c45.exe
Resource
win10v2004-20231215-en
General
-
Target
0b2684b9bda9e11c3c8e2863bed67c45
-
Size
119KB
-
MD5
0b2684b9bda9e11c3c8e2863bed67c45
-
SHA1
88fea07aeb06270a595cee91d31046973d30a1f2
-
SHA256
e4c9e071d11679db1ce4fdd8a488aa477883ee5297b0809d36827be75bee1867
-
SHA512
c5854d834a63985fae67e309f7cd2ae275ed8551f94d10bc0f07254219560097622a1fd1d050b1ea63f7af5445c9e6a389260695d250f3f632ea0cfe0bd6a638
-
SSDEEP
3072:WOsT0YrYaOb92qEsgGX2Kr6I9BYAaj9vLqaOsGSGPgDMhrZ:Mw8N7GmKuI/oZZMhrZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2684b9bda9e11c3c8e2863bed67c45
Files
-
0b2684b9bda9e11c3c8e2863bed67c45.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ