Static task
static1
Behavioral task
behavioral1
Sample
0b43e019e531a3d01b73f6ae5f666e0f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b43e019e531a3d01b73f6ae5f666e0f.exe
Resource
win10v2004-20231215-en
General
-
Target
0b43e019e531a3d01b73f6ae5f666e0f
-
Size
59KB
-
MD5
0b43e019e531a3d01b73f6ae5f666e0f
-
SHA1
9c4ca3c0f6ab94f20b4d0c5d2fa0dc7219d3e479
-
SHA256
bec7cf6a4cb9cb493f10c21fdd036031d713466dc4bce7bbfde73fb05475b1d7
-
SHA512
beed6a551c2a580f7d59c54dce1ce98e0350310e210203d3ea4d0fb8cb54e988fabddba0333d051dac37e1d96d62ec7bcabedadcbddf8679edc6a28daed3ed43
-
SSDEEP
768:S1GTQWEIdXe3QyH4oPXhtTnjaBfb1/B+hMY1JqTckgvGF3hQ7ydTCW57Lk:SEQWhe3QyYUxZnYfJ0SY1mhwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b43e019e531a3d01b73f6ae5f666e0f
Files
-
0b43e019e531a3d01b73f6ae5f666e0f.exe windows:4420 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
brrararq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
qjyzbzby Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqjbyjzb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjayayar Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ