Static task
static1
Behavioral task
behavioral1
Sample
0af9091b3f7623bd462d15c54f061231.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0af9091b3f7623bd462d15c54f061231.exe
Resource
win10v2004-20231215-en
General
-
Target
0af9091b3f7623bd462d15c54f061231
-
Size
118KB
-
MD5
0af9091b3f7623bd462d15c54f061231
-
SHA1
0a12d52fe4a315f11b50d1d0dcaee80b170b4b6c
-
SHA256
bb0badbc79392b2ed897ebba1a3454082e74469c1587755e1b8145d454f67e55
-
SHA512
2002d076fae1d4d36b561fc70c232ff81a0a96d53aa79270003f229a3bec8d053a6f124c0cb966b6af62748676ef015e8e52914224350eec4516963e2f177e1d
-
SSDEEP
3072:W1rhGjt+VO8015mbtVvfBl652ai41SG8aMxLG3nW:urLVg25aicSGVMBAn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0af9091b3f7623bd462d15c54f061231
Files
-
0af9091b3f7623bd462d15c54f061231.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.BRD Size: 103KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BRD Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE