Static task
static1
Behavioral task
behavioral1
Sample
0b5cbf843bdbe3eddff2ae06a7cd8907.exe
Resource
win7-20231129-en
General
-
Target
0b5cbf843bdbe3eddff2ae06a7cd8907
-
Size
394KB
-
MD5
0b5cbf843bdbe3eddff2ae06a7cd8907
-
SHA1
38716ee27322f9a205f608ebcb40bb0cbc0ea42e
-
SHA256
9dc125cde7076813d0cec6aa572cf13c5bcda6bc0e6b1ea6d612e405ef99b647
-
SHA512
a52d8ab832d3b82c1f5fbc49fc0c6d9755e45ef37753c1608ea95c2bfcbae8c9b08829dd7758cb2368a73160ccd020d1ae29c1eb9f8d0b3f6f0e1a36f133a284
-
SSDEEP
12288:AmQ9dCrejHa1c2obY7XQNSWShDYRtmLnrqYV9:Aq6jHIocYSM2nrqg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5cbf843bdbe3eddff2ae06a7cd8907
Files
-
0b5cbf843bdbe3eddff2ae06a7cd8907.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 63KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE