Static task
static1
Behavioral task
behavioral1
Sample
0b14bb544195b70b4c78bba84aa28315.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b14bb544195b70b4c78bba84aa28315.exe
Resource
win10v2004-20231222-en
General
-
Target
0b14bb544195b70b4c78bba84aa28315
-
Size
32KB
-
MD5
0b14bb544195b70b4c78bba84aa28315
-
SHA1
2a2351ca6a1ae704aca85b183421bdc21c6f80e3
-
SHA256
97556a921ae3b7de7fe28ef98accb8fc11b4a975f57da1acdd4e5686fdfaa039
-
SHA512
97af894a71ac99823642c6c4ae3807eb58dbad3d3e947537b98892d861d583eda8a9ecab9e0b6aa4c248615098e3ebb3d859ba8c6447281ca1c1aeeedac6a97a
-
SSDEEP
768:ABloil/3QJkiZ+MQwvggJPAmj0jDalnPsm9XcTkqSTFr5Fz/GHnO:6185QG9PB0yXhqi15FDGH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b14bb544195b70b4c78bba84aa28315
Files
-
0b14bb544195b70b4c78bba84aa28315.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xwytg Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE