Static task
static1
Behavioral task
behavioral1
Sample
0aa0f5f9037c3aa5c463cb7d607f2298.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0aa0f5f9037c3aa5c463cb7d607f2298.exe
Resource
win10v2004-20231215-en
General
-
Target
0aa0f5f9037c3aa5c463cb7d607f2298
-
Size
17KB
-
MD5
0aa0f5f9037c3aa5c463cb7d607f2298
-
SHA1
dfcd8aca121b4573ddbb86797852bc9c5cd2bc6c
-
SHA256
ec9484b4af3e1cc4e3ac6f158c041589135e4af932748a5815b86300e8a7584e
-
SHA512
0dff040b1c6c0ed5741731607ff36344d00513123df3e4dbf0b9de763d929599bd14497ee7df75c3ab817ea59fe725d9a74b7a1d2324aa0906dce6966e73fcab
-
SSDEEP
384:+OJMVZpFNLZ/fiCbdkgo69SURaeWRl2sI9qkrHM/1cZ3HK71L:ZWbPNLV/bdo69S0ahRm3YO3HKJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aa0f5f9037c3aa5c463cb7d607f2298
Files
-
0aa0f5f9037c3aa5c463cb7d607f2298.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
����t Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����a Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE