Static task
static1
Behavioral task
behavioral1
Sample
0a8e48c9cb0ec28bc29ea704f15310bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a8e48c9cb0ec28bc29ea704f15310bd.exe
Resource
win10v2004-20231222-en
General
-
Target
0a8e48c9cb0ec28bc29ea704f15310bd
-
Size
338KB
-
MD5
0a8e48c9cb0ec28bc29ea704f15310bd
-
SHA1
5b5282a66cf66d2ea9913811c91e5e540c63d996
-
SHA256
32f70e53b1048cfbf90303368f47710ac969a90f60cb42b812e2dd06dfc18862
-
SHA512
04e5db8ab9e090551857ab9c4dcbfbaced1027140559ea06ff899779e31068e9c32fc80d1745568a4fc3da91e53804dd0a6bfa20d6f11e7980dfcdeb22caef69
-
SSDEEP
6144:a9w57rSD0BZxw081XY1Ak15MqLMlbsDyemD6/zsUbG+9TeZe/qzbT3Ko/VfME1:a9iuY5v8lYnC39s2eMQsUb35EKo/VfMa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a8e48c9cb0ec28bc29ea704f15310bd
Files
-
0a8e48c9cb0ec28bc29ea704f15310bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 337KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE