Static task
static1
Behavioral task
behavioral1
Sample
0ebb3d1c4649c96967731fe76ac27263.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ebb3d1c4649c96967731fe76ac27263.exe
Resource
win10v2004-20231215-en
General
-
Target
0ebb3d1c4649c96967731fe76ac27263
-
Size
91KB
-
MD5
0ebb3d1c4649c96967731fe76ac27263
-
SHA1
e6fd7165da56f3c061f3db710214895afc7aaeb0
-
SHA256
cff60e5c00f9c8dd86f114572bf0c66f1aceb86cc48f0af19de7c5b955c782d8
-
SHA512
cf82b80355cca7f25b41e12238b3b07c73154dd172d0dd47475fa532755ada8493a73d02f9daee3b3197f4660d0fa401426f110b1c945d1dd288b266d717ece0
-
SSDEEP
1536:2PQVESLjhuto4zzya+lfdHRFfUXhG8+azzSP0zKN+Moe1HQSeekYK0yKU4EzkB:XtLjezuai1HfURL+XcKFQVIKw+zkB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ebb3d1c4649c96967731fe76ac27263
Files
-
0ebb3d1c4649c96967731fe76ac27263.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 68KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teraphy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE