Static task
static1
Behavioral task
behavioral1
Sample
0b1e7756e43afc76e3c9bd27cd1d4867.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b1e7756e43afc76e3c9bd27cd1d4867.exe
Resource
win10v2004-20231215-en
General
-
Target
0b1e7756e43afc76e3c9bd27cd1d4867
-
Size
259KB
-
MD5
0b1e7756e43afc76e3c9bd27cd1d4867
-
SHA1
729719440fa5a992facb74631c62b63a62123a5f
-
SHA256
2101b3971757e93745b409a355c0e4a773833d2ffe2e65db8611bd535c4fc829
-
SHA512
3767299bf995767bcc43a0d6b6a0ec9f57791622599b08af3014b08eb75c2f8239e37835cbc9b2bf21f6caead56a6a8e5a5db2970d162824410fe115a0964823
-
SSDEEP
6144:QEtgiGHajpWJ0JxjO9kCFas1qfis692XCrymu6o0Ay4W1G9/1:QKGH8pWJ4xjwas1qfis69ACemuy419/1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b1e7756e43afc76e3c9bd27cd1d4867
Files
-
0b1e7756e43afc76e3c9bd27cd1d4867.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.heb Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE