Static task
static1
Behavioral task
behavioral1
Sample
06c03e7873129a66195e1eb585835ea4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06c03e7873129a66195e1eb585835ea4.exe
Resource
win10v2004-20231215-en
General
-
Target
06c03e7873129a66195e1eb585835ea4
-
Size
47KB
-
MD5
06c03e7873129a66195e1eb585835ea4
-
SHA1
9eeed45a25d8811d3fa02c20756c38e653dfd061
-
SHA256
e5bad9d77552c74a07921b693c5b3b80a6d16bd0601d101c9ef405e2f2ef7abd
-
SHA512
3a8b089ae40eee0ef71ef11bd388cd532f51de9f1a91f18e24e3299f8d06e63e52f05df057bdacabc27d393ef05fa4e6be4b0d4440b1d522008025fd37266571
-
SSDEEP
768:unBnBHHIeoz04ZjF2N+r03eZEU35bOV5uux63MyZfjUe:unjHIeopZh0w03eZ935Y5X63hfjr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06c03e7873129a66195e1eb585835ea4
Files
-
06c03e7873129a66195e1eb585835ea4.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT2 Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE