Static task
static1
Behavioral task
behavioral1
Sample
0b80f1c534b5ee30a17c245e4ca9fc12.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b80f1c534b5ee30a17c245e4ca9fc12.exe
Resource
win10v2004-20231215-en
General
-
Target
0b80f1c534b5ee30a17c245e4ca9fc12
-
Size
213KB
-
MD5
0b80f1c534b5ee30a17c245e4ca9fc12
-
SHA1
5d849407cdfb6133dac0fc2168dc6c3d657c3415
-
SHA256
dd3fc70fbd92cab264a2511c40a9e639359d085cc3bc6910818afd6bd5f9fedc
-
SHA512
50116e43158f2c68547f29ba3dc75e4884ebfbe979900f1f52c4847c83b43960e341de6a9dcb1fbb98c9143513d3a4eea63f4c6561bc592b825175ceecaf9e25
-
SSDEEP
6144:kIk+JKMMs8b76/EaMNi3YLSl2imznw+MOtn8n7VKmgvxv+PX:kIk+Jt+DNijl2iew+Xt8nRKjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b80f1c534b5ee30a17c245e4ca9fc12
Files
-
0b80f1c534b5ee30a17c245e4ca9fc12.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE