Static task
static1
Behavioral task
behavioral1
Sample
0fb2f348e672a4995fa3d14d45d9b230N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0fb2f348e672a4995fa3d14d45d9b230N.exe
Resource
win10v2004-20240802-en
General
-
Target
0fb2f348e672a4995fa3d14d45d9b230N.exe
-
Size
52KB
-
MD5
0fb2f348e672a4995fa3d14d45d9b230
-
SHA1
6176ede8f5f3a0e7d859902fba1453eb3821d1bb
-
SHA256
aeb097efd6d1da2d78eff2922751b4ef8d679bb967a042379af5ca9952ff2dd6
-
SHA512
9a99b7e23f38abe02af19092f06c00ce6b646c0f03fe505b58e8badc35f9b52846ec85df96e7346876670a595d279669439b00840f647d02c71df2c16a4a5c15
-
SSDEEP
768:ehSq35fG1zl+GT9k7IoTk0ptgtd+0Qa4DJC9aLUNZpi/1H5F/sRjMABvKWe:ehr1mx+GT2hptgtd+A9aLHCjMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb2f348e672a4995fa3d14d45d9b230N.exe
Files
-
0fb2f348e672a4995fa3d14d45d9b230N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ