Static task
static1
Behavioral task
behavioral1
Sample
75717480ccb0278cbf2b02fb703b7c78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
75717480ccb0278cbf2b02fb703b7c78.exe
Resource
win10v2004-20231215-en
General
-
Target
75717480ccb0278cbf2b02fb703b7c78
-
Size
147KB
-
MD5
75717480ccb0278cbf2b02fb703b7c78
-
SHA1
e192ebdb5c53ed6f9730dafff9d21c6c19a569aa
-
SHA256
d3aeb667453dd4835a023ec3b3e42b2d71467e0fc2456007a0205f516ab431ae
-
SHA512
d68f610e2f59298595b51a2f136cf9a843df67dabe8f703b3014f45ec8b8332c393e364293c29a3f1c4488a6315c2e619646d6b9316a5c5de8cc60a0bf67a051
-
SSDEEP
3072:DPZulmYjp8lp2oUBtNn/YylwvELkoSz7sr+5xN4uUi/7bKaVhb/cpGD:DPMlh8uo0/gMLlSz7sa5/4uGC5qg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75717480ccb0278cbf2b02fb703b7c78
Files
-
75717480ccb0278cbf2b02fb703b7c78.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
�rBot.ex Size: - Virtual size: 804KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE