Static task
static1
Behavioral task
behavioral1
Sample
0b2903d4f2dcdf5b30b3d0ad128f6ad70b96813fe64b77397d0a4b1b672a0bb8N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b2903d4f2dcdf5b30b3d0ad128f6ad70b96813fe64b77397d0a4b1b672a0bb8N.exe
Resource
win10v2004-20241007-en
General
-
Target
0b2903d4f2dcdf5b30b3d0ad128f6ad70b96813fe64b77397d0a4b1b672a0bb8N
-
Size
90KB
-
MD5
4c2a296dc92d1a0b7663f1a579282540
-
SHA1
997d4178c275723d8e6ed0da558a6b09d32021c6
-
SHA256
0b2903d4f2dcdf5b30b3d0ad128f6ad70b96813fe64b77397d0a4b1b672a0bb8
-
SHA512
e862577d73c30df8b20a5aa440a399beadb096d40595b0226fb549745b65fe94c3aa1751f041c5c86fcb8016b3731a7e4c6e78f6796123a34b04775463883f59
-
SSDEEP
1536:5CrHZuPbqVeW0k7VTa5eUbvuyw3ZtwMEvAjF59LTr4QX6fOOQ/4BrGTI5Yxj:2ObbWjTIeaPQjF5pTr9WU/4kT0Yxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2903d4f2dcdf5b30b3d0ad128f6ad70b96813fe64b77397d0a4b1b672a0bb8N
Files
-
0b2903d4f2dcdf5b30b3d0ad128f6ad70b96813fe64b77397d0a4b1b672a0bb8N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ