Static task
static1
Behavioral task
behavioral1
Sample
0ba9b36560c326895515164e1a58f40f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ba9b36560c326895515164e1a58f40f.exe
Resource
win10v2004-20231215-en
General
-
Target
0ba9b36560c326895515164e1a58f40f
-
Size
105KB
-
MD5
0ba9b36560c326895515164e1a58f40f
-
SHA1
f68254a56a2b94ee1da7b58685332ea76d26c6c6
-
SHA256
92790521868fcba37a10db6a19b0324962fe48a4b2edee79e8b643f9f076d1b9
-
SHA512
ab9b4c164d0c55b2ee2e5c9a90aae1f6b7a05dfdeb2fc4dd8cd2cbd991a5fd7f05427eee18a936455b42e8105b27f3629c313aa45acef97db0083d08237572f7
-
SSDEEP
1536:8mUqiQJ2gxmW9y+0dwr81Bti51nUfb25q6JTwurEos3qW8s9LlqnBuiTt6DtW9YH:8aNJ2pW9yHdwgrtWnKTaW8s9+EpW9i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ba9b36560c326895515164e1a58f40f
Files
-
0ba9b36560c326895515164e1a58f40f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 91KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ