Static task
static1
Behavioral task
behavioral1
Sample
a0b343a213a7d3af1248fc3dd066b0da.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0b343a213a7d3af1248fc3dd066b0da.exe
Resource
win10v2004-20240221-en
General
-
Target
a0b343a213a7d3af1248fc3dd066b0da
-
Size
980KB
-
MD5
a0b343a213a7d3af1248fc3dd066b0da
-
SHA1
4278771db3e1c78d6a924aad6959e7cffacda1cd
-
SHA256
3b8802d58e664815d9e2de8141b6485b2d2efd84130c0f96b3200f5bc2647dc6
-
SHA512
c13e9fe9fd16715304eb8ea92333f4478950fc756d79431e38f601c230962a9134ce449dd496b65183fe7d165e6b83a92e65ed81b1d624e64cf9d95041620e7c
-
SSDEEP
12288:yqay44t/O4DjZFhiG59PB8E9KGVCzZ1922WANDMj4ox:35jtmIjZviG/5/9fVSf9rWAN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0b343a213a7d3af1248fc3dd066b0da
Files
-
a0b343a213a7d3af1248fc3dd066b0da.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 825KB - Virtual size: 825KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ