Static task
static1
Behavioral task
behavioral1
Sample
0f23a8bbe5d3be3c174b6782ed14f700.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f23a8bbe5d3be3c174b6782ed14f700.exe
Resource
win10v2004-20231215-en
General
-
Target
0f23a8bbe5d3be3c174b6782ed14f700
-
Size
272KB
-
MD5
0f23a8bbe5d3be3c174b6782ed14f700
-
SHA1
8eb1d6787126d8313faed7a1a4c706b4a2e98ef7
-
SHA256
39d79f367d3a0d2bdebfdc070e3e999a6cb0a31670081ce946d677724b450093
-
SHA512
74f61882b90d1f00e4d15d985821a35701c12a888c2c5ce2fc9480ef92a9955483c322e203908e92ddefd8cf02ff6cc306d3883f5b1b641d58f3d2fe749e9156
-
SSDEEP
6144:gxvbM+Uppq66ynbkreJVMmVNQWlDOQu/0RaqIGz72zSKrLyJpv7Dx0LxtOC:gZbtE46HbkyJjNpV8/0RaxGXi8pT10DV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f23a8bbe5d3be3c174b6782ed14f700
Files
-
0f23a8bbe5d3be3c174b6782ed14f700.exe windows:4 windows x86 arch:x86
e960f97c3935559114564846b971132d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetEnvironmentVariableA
Sleep
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE