Static task
static1
Behavioral task
behavioral1
Sample
01b9de3f9284ee1a6919b3370756b270.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01b9de3f9284ee1a6919b3370756b270.exe
Resource
win10v2004-20231222-en
General
-
Target
01b9de3f9284ee1a6919b3370756b270
-
Size
282KB
-
MD5
01b9de3f9284ee1a6919b3370756b270
-
SHA1
0adacd42662dc355710d63b459dd2c8f1c675e71
-
SHA256
71a884fa969d8fc6dbfe2bd731f9feeb5cc56c93530fa9220c01c6994ff64f89
-
SHA512
e65f5229d248df6db20e44138f1e2937c4d46759e8c18001aafb3e0816f50e6e9035fcab3eb68feb852e89139e41a84ea0215102102c87ef6be0b9a9889116c7
-
SSDEEP
6144:4sIQ99HNvHrAzaZ7hNvR77HDN/BPyXO6qGNSadnFkJQiuWxjJXeye9F:UQ99HJAzaBx5/IXI2nFkg6JXmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01b9de3f9284ee1a6919b3370756b270
Files
-
01b9de3f9284ee1a6919b3370756b270.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE