Static task
static1
Behavioral task
behavioral1
Sample
0b22feb5e3e8337cb19dd86670aaa82c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b22feb5e3e8337cb19dd86670aaa82c.exe
Resource
win10v2004-20231222-en
General
-
Target
0b22feb5e3e8337cb19dd86670aaa82c
-
Size
89KB
-
MD5
0b22feb5e3e8337cb19dd86670aaa82c
-
SHA1
c55819ad3377846021c936d6aaa75c6e5eef32ae
-
SHA256
f0618964a96669c10c9b013c3ed806451d1e61c930aca187e3394714e87a12e3
-
SHA512
602976fa315293e5a5b909b346ab8e86c8d2fa0127ed6916799ebec5ddd319b9d0a84afc524ac10976d8473b917e942a8a57c35e993d5c4c113842b56231fb97
-
SSDEEP
1536:0Ol3qJVm1BaQVfHtlhxuiKD0KboUq19gqolIdQyF/h49dt8/7CboBM/ICqjCVwbi:jRB5ftlKD0Vh1Gqole/Kl47DBM/xwbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b22feb5e3e8337cb19dd86670aaa82c
Files
-
0b22feb5e3e8337cb19dd86670aaa82c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xiaohui Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mmym Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE