Static task
static1
Behavioral task
behavioral1
Sample
0b7dd427e5363eb09449f3cc335172ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b7dd427e5363eb09449f3cc335172ad.exe
Resource
win10v2004-20231222-en
General
-
Target
0b7dd427e5363eb09449f3cc335172ad
-
Size
2KB
-
MD5
0b7dd427e5363eb09449f3cc335172ad
-
SHA1
a7af43222789552f137009af44016268e96ddcbf
-
SHA256
e3870cce7a885c0eb8897a6cfed236c467c27c9dbd00f674471a878977a9beec
-
SHA512
8694ca01535a29bd529263e362ed817a31b7a74f390691344f9b09188023194ffd42031e9c391c4fc87ebefd3bfbf72514309b6938b824dbe168ea58fa7e68cc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b7dd427e5363eb09449f3cc335172ad
Files
-
0b7dd427e5363eb09449f3cc335172ad.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE