Static task
static1
Behavioral task
behavioral1
Sample
0b535dab42a6701ada4134f8cbe30384.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b535dab42a6701ada4134f8cbe30384.exe
Resource
win10v2004-20231215-en
General
-
Target
0b535dab42a6701ada4134f8cbe30384
-
Size
59KB
-
MD5
0b535dab42a6701ada4134f8cbe30384
-
SHA1
7ea46cd13fd1cf8660fc9a150454403d49605f59
-
SHA256
bc7c9d8768e2ef976859236891876026d3e17d36bec43d02ef63161b31105bc0
-
SHA512
92e7da8ea5b8de0f3e65131962b5218d4acc33b29f77e864bc88a757779638e06eb236798ef129589f0f9950ce4cfa1d7303f8b131a6323232f31c6f323c1373
-
SSDEEP
768:hF494raGXAoegkCaIxgq48ZuPKG6wJnv8Ui12MqNbHIQwLQOfG:P49mM0kC9OP7YwJnv8Ui12DNzZOfG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b535dab42a6701ada4134f8cbe30384
Files
-
0b535dab42a6701ada4134f8cbe30384.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 180B - Virtual size: 256B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nAh Size: 218B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE