Static task
static1
Behavioral task
behavioral1
Sample
0b596b794fc329fd0d314595384eadf0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b596b794fc329fd0d314595384eadf0.exe
Resource
win10v2004-20231215-en
General
-
Target
0b596b794fc329fd0d314595384eadf0
-
Size
25KB
-
MD5
0b596b794fc329fd0d314595384eadf0
-
SHA1
d16cbbb36f4ab5c84ce74561e630d71ea694c08a
-
SHA256
7f4d6e22c0b4d17509c02759c150d194f0dcb694ed0c6b1ce64c2f8eb916fc36
-
SHA512
acb73aaa4e632565974f8f8bacc8fef19db0c6d846829360577061cc3ba8379039af6b557d7a1d26c6feaba3589c57ddd399f961d389a0baa8ab098c8113e3b8
-
SSDEEP
384:m8gGOuVQjBBLg4fpi4gMsFS/8IVWO0CMSvEOAgETDs9Pb7b/S8VdGL4Q3COPL:qKQNBL/pRgMsFY8XYETgJW8/OpyS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b596b794fc329fd0d314595384eadf0
Files
-
0b596b794fc329fd0d314595384eadf0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�{�Z0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�{�Z1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�{�Z2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE