Static task
static1
Behavioral task
behavioral1
Sample
03bbcccf5da93e7c8b89e7b748948784ce74bca85e9f38c6209e5bd4a32c2bab.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
03bbcccf5da93e7c8b89e7b748948784ce74bca85e9f38c6209e5bd4a32c2bab.exe
Resource
win10v2004-20240226-en
General
-
Target
03bbcccf5da93e7c8b89e7b748948784ce74bca85e9f38c6209e5bd4a32c2bab
-
Size
103KB
-
MD5
c0292f6e6a2859d7725bb3ac6b64b063
-
SHA1
eb318d03774d6dea99b91f7cfb455f851f2e7930
-
SHA256
03bbcccf5da93e7c8b89e7b748948784ce74bca85e9f38c6209e5bd4a32c2bab
-
SHA512
d692c79c6c81fc1bbe3efeb63912648abe482923cafc279821b679d820c87eaa6c6b9018252a60cb9ba3a18681fb4622416e49ce44650e9706359fa02349739d
-
SSDEEP
3072:kSsswH2QPy1MCiMPHtJmeZXKhNYetgc5KQuzyOBje3dipy:kPWwyiCDfn5KjYOgc54yOteB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03bbcccf5da93e7c8b89e7b748948784ce74bca85e9f38c6209e5bd4a32c2bab
Files
-
03bbcccf5da93e7c8b89e7b748948784ce74bca85e9f38c6209e5bd4a32c2bab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
emsmbu Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dvtns Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xmsfw Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ