Static task
static1
Behavioral task
behavioral1
Sample
0bc5b927e7e91a05b4bb3daf77213f5b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bc5b927e7e91a05b4bb3daf77213f5b.exe
Resource
win10v2004-20231215-en
General
-
Target
0bc5b927e7e91a05b4bb3daf77213f5b
-
Size
824KB
-
MD5
0bc5b927e7e91a05b4bb3daf77213f5b
-
SHA1
29d58ed947e9f1007b01208b8cf904aff3b10751
-
SHA256
157689867df74d6ae54b1a5730d89cb48774ad2ef2d1b0b492e4b248fb447326
-
SHA512
44c1a9ee6a840003fca70da3c29c2a96e92ba26a14615267af390e25ea8dbd43670b193f32a22b9a79e2f72c991d73eeb30a2425f82895bf81cb31f54e45ff44
-
SSDEEP
24576:wqfN24BVoCje7+mwU9TF+trP1rFeysmpR:wqd5eJ3TMtru5yR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bc5b927e7e91a05b4bb3daf77213f5b
Files
-
0bc5b927e7e91a05b4bb3daf77213f5b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.qnk Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE