Static task
static1
Behavioral task
behavioral1
Sample
02b95a2bb089394fea8291be0990e44c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02b95a2bb089394fea8291be0990e44c.exe
Resource
win10v2004-20231222-en
General
-
Target
02b95a2bb089394fea8291be0990e44c
-
Size
907KB
-
MD5
02b95a2bb089394fea8291be0990e44c
-
SHA1
64a5ce45bf5694457137dd43bc7d566e2c75e556
-
SHA256
95ad1e819392fd1c48d976ceee2ce887650351303263a93529f6dbf2f06b7240
-
SHA512
8e28fdc898a162bb0168f6df17687f27f0bbd41984cedae4dac68a3af479fa454db19378ed823f9ed2ceaa8fd07e1b40f8d441cc277f67cb9ce46cf3b2aba3ec
-
SSDEEP
12288:oUmHVuWlJaooLKPzl4zs63tRsVrQbwz3rD7FdWr28hCt8dIaYjzlP9wLflj1dVcS:hmHoWajLOxEs2GJguw1XNa/ZS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02b95a2bb089394fea8291be0990e44c
Files
-
02b95a2bb089394fea8291be0990e44c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ