Static task
static1
Behavioral task
behavioral1
Sample
00b4655e01a248518f889d08369edd9a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00b4655e01a248518f889d08369edd9a.exe
Resource
win10v2004-20231215-en
General
-
Target
00b4655e01a248518f889d08369edd9a
-
Size
281KB
-
MD5
00b4655e01a248518f889d08369edd9a
-
SHA1
02510af0c54861ca9b87338316493083a0891007
-
SHA256
e4610dbb219c36caa2f9a49a848804db633ea131cfa06b9d2943aaf78eccf57a
-
SHA512
865fdc98068aece508ca83381160824534b823e7bbd2cf98859c4c8d2c6f1b698cb2cf84acf89a690bc068d367182081b79a675b023c5da8f860731c7f26b7cc
-
SSDEEP
6144:dBB0ksjrOw3Twz0TBtArmlFhKuDOKSE66nXbEc/h:fB0ksjrOG0gTBtAyhKuDs3UXbEuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00b4655e01a248518f889d08369edd9a
Files
-
00b4655e01a248518f889d08369edd9a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 88KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE