Static task
static1
Behavioral task
behavioral1
Sample
0bcf173fd50a819bcaa48dcf5c24bc16.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bcf173fd50a819bcaa48dcf5c24bc16.exe
Resource
win10v2004-20231215-en
General
-
Target
0bcf173fd50a819bcaa48dcf5c24bc16
-
Size
15KB
-
MD5
0bcf173fd50a819bcaa48dcf5c24bc16
-
SHA1
e26a7b05c8d674220bb5e57827d7a61a53f3926e
-
SHA256
990df7fdf9d5354d3d7eb49b8a42c2f4830906625b870e206a9fa8b4243c2fda
-
SHA512
dbd81f859acdbd95cc0a0a18387eaef1feefef02a20546f3358f7cae13d70a4d1b92b1fa4d8659a17f818000b797c480455a0c2d852d6ea684c2b1558cbcd09d
-
SSDEEP
384:Fd7vdphkXnp+m7JDWkrjYh7ju4m983stpwjieX0VM2b:TvOXpn6krjYh7j1g8QaPX0i2b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bcf173fd50a819bcaa48dcf5c24bc16
Files
-
0bcf173fd50a819bcaa48dcf5c24bc16.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ziyue! Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.373250 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE