Static task
static1
Behavioral task
behavioral1
Sample
01b4a6209de2c8d2b21cde5adec75870.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01b4a6209de2c8d2b21cde5adec75870.exe
Resource
win10v2004-20231222-en
General
-
Target
01b4a6209de2c8d2b21cde5adec75870
-
Size
312KB
-
MD5
01b4a6209de2c8d2b21cde5adec75870
-
SHA1
1947a7aeb7434648b1ca6dea309b188119ac9d27
-
SHA256
b0ab9977a7022eadea20b0ba33b1f07c6c46f63d4d86dfebd3b64230ac89b047
-
SHA512
5cab067486cd5b7612b48acf115a42fe6345d8ffddfc421b529dbb1c7266bf8811a1bb990b63fd2eb9e61f90dde977096973ac66435a0a4d66226544e7428cf3
-
SSDEEP
6144:UaUNxXFIZW84aKqRROWHKe4Df+DKt3MghUOr5dBbTI9B14R:Rmx13Rqnj4OKt8ghUyVbE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01b4a6209de2c8d2b21cde5adec75870
Files
-
01b4a6209de2c8d2b21cde5adec75870.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE