Static task
static1
Behavioral task
behavioral1
Sample
0f460f28777ee05856a3fde46c0eaadb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f460f28777ee05856a3fde46c0eaadb.exe
Resource
win10v2004-20231215-en
General
-
Target
0f460f28777ee05856a3fde46c0eaadb
-
Size
911KB
-
MD5
0f460f28777ee05856a3fde46c0eaadb
-
SHA1
7f93e546bf084dc2f0ab2491c9ca16ca62030217
-
SHA256
1d98010485b4a7eebf5fbcf65d8b121dfd632bfa758c61d383093ab79febe60b
-
SHA512
0e8851f4ad943c487b6418e25963b3f86d4c803b72145239b02f8d7e1e84466e458ece36d0c2cdde762911c51e8898b58b04a535f00d7a1e048eb53dd99b818b
-
SSDEEP
24576:w1xRG4PON3kxXlaZ/pZLxIu7IT2Bv+ZcL45Q6SLObgno:w9G48UxoJxIu7IT2ZTSgo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f460f28777ee05856a3fde46c0eaadb
Files
-
0f460f28777ee05856a3fde46c0eaadb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ghostkim Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE