Static task
static1
Behavioral task
behavioral1
Sample
0dba65d6132da93e5174092656ea6bff.exe
Resource
win7-20231215-en
General
-
Target
0dba65d6132da93e5174092656ea6bff
-
Size
1.2MB
-
MD5
0dba65d6132da93e5174092656ea6bff
-
SHA1
34ef36888de69a344520580c873fae7d9af4ba67
-
SHA256
549c7b3a34dd7a165cf685208af542f10577968ae1fc15182e6ce9a50dbf3696
-
SHA512
ed7da829d0c7e02c32bff64aec164e9c2e03f4ff78eaef758dd893b54c89889059dfa6d05ab6db6f1924ca3c8f2098e60ef263c2dc115c6adaf2235c7b005b63
-
SSDEEP
24576:POiXnGFhjHZodnKFJitwlHxejVuHRPc7V0XdG9IUXqWPCVB6x:znGz5oY2uHws9c7V0Arii
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dba65d6132da93e5174092656ea6bff
Files
-
0dba65d6132da93e5174092656ea6bff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 447KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 588KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE