Static task
static1
Behavioral task
behavioral1
Sample
0b218bb517e845a0f63165f262deff74.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b218bb517e845a0f63165f262deff74.exe
Resource
win10v2004-20231215-en
General
-
Target
0b218bb517e845a0f63165f262deff74
-
Size
27KB
-
MD5
0b218bb517e845a0f63165f262deff74
-
SHA1
b324b887759c2205c64a4d9e252d8478ac1f82e1
-
SHA256
340e1c2f15a518e869579bb3de8b31f7598bfbde42d89e67f3a1cb29ebcdbba3
-
SHA512
b85497dc28cd14cfedfc337624bc081389881045b2f819718d69ef7288def8faf13abdf50caa6a32859be03199659770dab9bdf33a66bd530263050269a75da6
-
SSDEEP
768:Ys1HuSKCVVjWNCsms5zokDfw9iGphqajj+B:VLyYs1okkRpEij+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b218bb517e845a0f63165f262deff74
Files
-
0b218bb517e845a0f63165f262deff74.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Sections
��i�Ԫ�� Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��|� ,� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�CQtCܚ� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ