Static task
static1
Behavioral task
behavioral1
Sample
0bba93d4578a1803f00516a40db3cab6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bba93d4578a1803f00516a40db3cab6.exe
Resource
win10v2004-20231215-en
General
-
Target
0bba93d4578a1803f00516a40db3cab6
-
Size
390KB
-
MD5
0bba93d4578a1803f00516a40db3cab6
-
SHA1
c973eb507d7c5c3c89ffe30a78eec1a877967103
-
SHA256
66a3bf12d5213b601b175106c73d4b0413b7f918ee8330570c9ec4d7ce182654
-
SHA512
ad5f722ebacb8d8767198a83378ea9cfc8ebc46887b61759d39d1d8f6091bd2ee7b133354a54e52e3eb4938a3385dce272b0e1a538b7317fa467d99ef7448e06
-
SSDEEP
12288:tOpwozcpW0Pe10qM0IQfqfP9oHqfO0UQu:8aBpWeTqMRQf4POKfO1Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bba93d4578a1803f00516a40db3cab6
Files
-
0bba93d4578a1803f00516a40db3cab6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 386KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ass Size: 512B - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ