Static task
static1
Behavioral task
behavioral1
Sample
0bbf5983b98a7f1e1ecddc9eb70f411f9238a78b7004b7c56d1374799d98d21c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0bbf5983b98a7f1e1ecddc9eb70f411f9238a78b7004b7c56d1374799d98d21c.exe
Resource
win10v2004-20240412-en
General
-
Target
0bbf5983b98a7f1e1ecddc9eb70f411f9238a78b7004b7c56d1374799d98d21c
-
Size
1.2MB
-
MD5
ca59b89668989472f8cc289768c656b3
-
SHA1
700bc73cecffbf21d1e0f52984c3f38dc1d23889
-
SHA256
0bbf5983b98a7f1e1ecddc9eb70f411f9238a78b7004b7c56d1374799d98d21c
-
SHA512
b660376628f58816fc8ee42d85c5389b06ba74130ce884e214d04cac785536e48cd8f0ddf59e314a1fcc43239b64fde4a64cee4b6dc8239f0914939972aaac76
-
SSDEEP
24576:P7OGjqhMHaJSaH4l9+7MGG36MeENasvunfMNB3HIsIHhsWRlDQ:P7OGjqhWuHU+9KasvukNrMsW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bbf5983b98a7f1e1ecddc9eb70f411f9238a78b7004b7c56d1374799d98d21c
Files
-
0bbf5983b98a7f1e1ecddc9eb70f411f9238a78b7004b7c56d1374799d98d21c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE