Static task
static1
Behavioral task
behavioral1
Sample
0bfce6d9860fd04ce6276ebd7043a3b01feb0377ac6df3e65d6a1a02880da724.exe
Resource
win7-20240221-en
General
-
Target
0bfce6d9860fd04ce6276ebd7043a3b01feb0377ac6df3e65d6a1a02880da724
-
Size
350KB
-
MD5
6e4ad16c96b48d11b0f227970c8e8634
-
SHA1
5f1bd3de08dec346a46a6ea734788d9d226a16b6
-
SHA256
0bfce6d9860fd04ce6276ebd7043a3b01feb0377ac6df3e65d6a1a02880da724
-
SHA512
0b814beb54845617cb74fed345c032b644133ef8333d46b1d2404c53f089d65d9bf82b6259867912ab1e4c6431cc668f6f16b051ab3b7f1724657ac63a54f5b7
-
SSDEEP
6144:4cm7ImGddXvJuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4TrH5:+7TcBuGy/Sa+/sie0OpncKe/KFBOfmzR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bfce6d9860fd04ce6276ebd7043a3b01feb0377ac6df3e65d6a1a02880da724
Files
-
0bfce6d9860fd04ce6276ebd7043a3b01feb0377ac6df3e65d6a1a02880da724.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.didat Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ