Static task
static1
Behavioral task
behavioral1
Sample
0bd38c69ae4763dd44dc40cb982170d4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0bd38c69ae4763dd44dc40cb982170d4.exe
Resource
win10v2004-20231215-en
General
-
Target
0bd38c69ae4763dd44dc40cb982170d4
-
Size
305KB
-
MD5
0bd38c69ae4763dd44dc40cb982170d4
-
SHA1
99edf989e39a87b289b8200f2d123f223fada294
-
SHA256
18cd8e5fb03291f1b7ab6f96cf446be56d8a06bd3a9e20c91c371a1608f3144a
-
SHA512
3baae20b017aedd6f36eed917a676672274028ebfb106445316e4775137a1de8205436944aee57527b6317e303a66cb40f4104658bb579255715de8687e52ce3
-
SSDEEP
6144:B0xLhFosRvIISKjI/NDdFqNOwoFf7DkeQ14xc+MTs:oUMS2GNDko57DU1YQT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd38c69ae4763dd44dc40cb982170d4
Files
-
0bd38c69ae4763dd44dc40cb982170d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 275KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ΰ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nt Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mmym Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE