Static task
static1
Behavioral task
behavioral1
Sample
0bef7d5fe63a4a3bd507bfb50fa27c04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bef7d5fe63a4a3bd507bfb50fa27c04.exe
Resource
win10v2004-20231215-en
General
-
Target
0bef7d5fe63a4a3bd507bfb50fa27c04
-
Size
55KB
-
MD5
0bef7d5fe63a4a3bd507bfb50fa27c04
-
SHA1
ca6efe9c800df2f2b19f907bb8fc29b8163ede40
-
SHA256
ae360a308fb6c9690ffe0a05d2b60f32251c425e4bfa2766155cc8b8911a124f
-
SHA512
d8f6a48bc123983f5953c55dd217294e43f3c77c44e84edc6c7416add84e37291f2a7a9a921d405be9ac75fe91706089b8605efd647cde08e51d1cf1e4fbfb32
-
SSDEEP
768:yl8NQURlQrF61GlooNo/qJE8Gl8CWnfVuXjWiQTejn7ocThPkZNuYI8yyx2pXM:yrklQrM1No+cn9TnUXSHTOnxThdexaX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bef7d5fe63a4a3bd507bfb50fa27c04
Files
-
0bef7d5fe63a4a3bd507bfb50fa27c04.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 55KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE