Static task
static1
Behavioral task
behavioral1
Sample
0bd4bd2df2f4bf8d8958b325c2db1989.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0bd4bd2df2f4bf8d8958b325c2db1989.exe
Resource
win10v2004-20231215-en
General
-
Target
0bd4bd2df2f4bf8d8958b325c2db1989
-
Size
723KB
-
MD5
0bd4bd2df2f4bf8d8958b325c2db1989
-
SHA1
8ef7d76378e02be32b43da72499fae08531be5cd
-
SHA256
9da0da8f1c548dd93d555d7e0470aef4214a9bdd992493a8f6fcf302624520d1
-
SHA512
85bbd92e9f831ea77e17b4e0a3fb573e094aafee9c4f23e6cf1907f2581cb6e113c2c3cfdbe9b63d7aeb1b28960d1d4c8e052d835b9b6533358fbd727d9cede4
-
SSDEEP
12288:KlLMCLoSNaJSQGdAPq+Je/B3aScRbggkDnP03rTvcSVc0i+0scdX:CQCLKJSQGmPLe/x2s1DurTvf09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd4bd2df2f4bf8d8958b325c2db1989
Files
-
0bd4bd2df2f4bf8d8958b325c2db1989.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 619KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ