Static task
static1
Behavioral task
behavioral1
Sample
0be66183444431aeb106a43eb27ccb90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0be66183444431aeb106a43eb27ccb90.exe
Resource
win10v2004-20231215-en
General
-
Target
0be66183444431aeb106a43eb27ccb90
-
Size
19KB
-
MD5
0be66183444431aeb106a43eb27ccb90
-
SHA1
22dead18ee92e8935f4272f8a0037a1bb4b7ad57
-
SHA256
57b292019e61edd317aaa0356bc01bd9544b8af990c9996670777d4c5b56b01b
-
SHA512
a2a0aacab9b0eb1eaeebb923b9bb0af08784401467796d49d05b5f22c62f665b3d9cc54ab8e99aa6d8e9257c8c1fbf1d705bd30e0e7e2f70841a9ec61ab70687
-
SSDEEP
384:VOfCI28AmY0RcsYk4YD0u3L6sXf4jDymZeOrQulEN:cCD1s3Qu3L63/cue
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0be66183444431aeb106a43eb27ccb90
Files
-
0be66183444431aeb106a43eb27ccb90.exe windows:4 windows x86 arch:x86
46d691497927f6be3201475ad86fd6a5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
msvcrt
__set_app_type
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 84B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ