Static task
static1
Behavioral task
behavioral1
Sample
0be203052ab291984ce06311e785204f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0be203052ab291984ce06311e785204f.exe
Resource
win10v2004-20231222-en
General
-
Target
0be203052ab291984ce06311e785204f
-
Size
67KB
-
MD5
0be203052ab291984ce06311e785204f
-
SHA1
5bc2c1f0c5cd733ade89b8a106ddaf5c880a037f
-
SHA256
ff1207a299e6cc6a665fde8c48e6005a8a310e7aafd1ff9bc82ebcdfaf053a28
-
SHA512
cb36b73baf488e3ac29925cfcc52c860cff9e7616e8ea5f83429b742e70dc1f86205b07d93a9b0c6b61c3b8a4df8657d4a7ed768a426c3f58805d473bf5b94a7
-
SSDEEP
1536:En2U27ot8kSuQMR6GImo4bAKfpdgmFVuCGx8ahoFJZKHfAdUY:Ez2st3gMRVlbbTJFVu5x8ahobZSYdUY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0be203052ab291984ce06311e785204f
Files
-
0be203052ab291984ce06311e785204f.exe windows:4 windows x86 arch:x86
4c0c4f68eff15cf5001f6952dc85cb0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ws2_32
socket
Sections
.78s Size: - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.78s Size: 66KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE