Behavioral task
behavioral1
Sample
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe
Resource
win10v2004-20231215-en
General
-
Target
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce
-
Size
316KB
-
MD5
cec5b5a0f4ac5de64aa1a13cc1daf94b
-
SHA1
34c83f89c4fb5d2f7eafa9fab7578960ee4e3e07
-
SHA256
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce
-
SHA512
02b43f9561d31454ec817d393814d2d672c5785074c1917136500fa5e89cd04338f496d2933f81099d301b1c0e6e52d0ade4236bc7b608dc7530ceed34828196
-
SSDEEP
3072:F8PoFoXLhhyPiTJTQBgpv7eRXxSY04KHwRjti049jGQxe73BZLraX/XjFeBnbnTJ:yA6Lh7TNDpDepIH6jtz49r0GrFAXTn1
Malware Config
Signatures
-
Detects PikaBot botnet 1 IoCs
resource yara_rule sample family_pikabot_v2 -
Pikabot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce
Files
-
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ