Static task
static1
Behavioral task
behavioral1
Sample
0b93137c3f82a915a8540fd0c9e57166.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b93137c3f82a915a8540fd0c9e57166.exe
Resource
win10v2004-20231222-en
General
-
Target
0b93137c3f82a915a8540fd0c9e57166
-
Size
97KB
-
MD5
0b93137c3f82a915a8540fd0c9e57166
-
SHA1
e90e206201ebf9e9f75045028b94afb7e7851158
-
SHA256
5539af8019c40334828a8f343ee143489ec84548b6a5b10335ba37f760ff6987
-
SHA512
74b736a526d15705753640f82fa7e5f169531c78c117c38064c5d8e018ae5fcfe979c0129b7873656845a5ab937e5803203fd451b7e042a0cae85d8711081938
-
SSDEEP
1536:PZXk1UbMWZ7pcJaC11oCg4Rid7zn3Pm5nhQ7UT+ldiAxs3Yt4pydZO61DtZwD82V:x01U17ig4RitzfMyoEiqcYhZOyJZob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b93137c3f82a915a8540fd0c9e57166
Files
-
0b93137c3f82a915a8540fd0c9e57166.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.3MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ