Static task
static1
Behavioral task
behavioral1
Sample
0b4ecd071ba5294eab80b1ad8be528bcbfa77e2159a0a5fb05f1326156298766.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b4ecd071ba5294eab80b1ad8be528bcbfa77e2159a0a5fb05f1326156298766.exe
Resource
win10v2004-20240802-en
General
-
Target
0b4ecd071ba5294eab80b1ad8be528bcbfa77e2159a0a5fb05f1326156298766
-
Size
4.9MB
-
MD5
23c5cf5f00b689520abb4f860e4e703c
-
SHA1
32b977ef23400f0b26053a16d2dd403696dc576a
-
SHA256
0b4ecd071ba5294eab80b1ad8be528bcbfa77e2159a0a5fb05f1326156298766
-
SHA512
f5a6b2f44f0aae59c3396fdb44ceba046100e43967cef46e2f20bae30d35d1d5241b39c7989575f1ab3614d1da4364758b538992fedccee5b0e2d3d204b93cc2
-
SSDEEP
49152:uAcvFvhSb52iqYNxpBJVcaQIcwanlYW2Eh+tlipromfR0TM3nh:uAS+b52iRHBXTJcwUNTeTuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b4ecd071ba5294eab80b1ad8be528bcbfa77e2159a0a5fb05f1326156298766
Files
-
0b4ecd071ba5294eab80b1ad8be528bcbfa77e2159a0a5fb05f1326156298766.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.���� Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���� Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ר�� Size: 34B - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��л Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ʹ�� Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ