Static task
static1
Behavioral task
behavioral1
Sample
0b399c7b58f89541d7f4cb63a8b9ca00.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b399c7b58f89541d7f4cb63a8b9ca00.exe
Resource
win10v2004-20231215-en
General
-
Target
0b399c7b58f89541d7f4cb63a8b9ca00
-
Size
277KB
-
MD5
0b399c7b58f89541d7f4cb63a8b9ca00
-
SHA1
4224cbb39839c252d26585ccd9c5dacf6645161f
-
SHA256
8d94557a0a3296a5041a1913c11a6a48ec2b4bfe0654a05b24a77c1d5a8de0c2
-
SHA512
052c20a4c0fcbf4f3294f8061738903754c78f907e8aff407e45a02990f8011df97b1560fe6bad84db72cd6bf4e89000dcf9d987073f7dd9abdeef9dc5494a3b
-
SSDEEP
6144:6Z6WCGdMmm5rZvDvVPeJI74F5sfY/4XqPTN+3f69:G6BG+mmtZvT0aEFyf3XqPTN+i9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b399c7b58f89541d7f4cb63a8b9ca00
Files
-
0b399c7b58f89541d7f4cb63a8b9ca00.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
WinLice0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLice1 Size: 272KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 238B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ