Static task
static1
Behavioral task
behavioral1
Sample
0bd4ec2b463547c921d1233972a912a6a134a281e1a0606522b3c7e657bc5c65.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
0bd4ec2b463547c921d1233972a912a6a134a281e1a0606522b3c7e657bc5c65.exe
Resource
win10v2004-20250207-en
General
-
Target
0bd4ec2b463547c921d1233972a912a6a134a281e1a0606522b3c7e657bc5c65
-
Size
1.7MB
-
MD5
27452174e04d3a8737e3abd658a2cd5a
-
SHA1
80b43b0e543e55d4fbf896103c9d68448a6aead0
-
SHA256
0bd4ec2b463547c921d1233972a912a6a134a281e1a0606522b3c7e657bc5c65
-
SHA512
5246318cb15b235db64e4a216026a2f6fa88d763a7bc56502f73b9bc53736723d01414e74ccd263156749475e1484333fc89ea7b6912ba02eb834eee7c73609d
-
SSDEEP
49152:XS6Jv19IiQkvlNLzIuXrE20t9kzuK2I2i/:XS6JvkiQkXPuXJa/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd4ec2b463547c921d1233972a912a6a134a281e1a0606522b3c7e657bc5c65
Files
-
0bd4ec2b463547c921d1233972a912a6a134a281e1a0606522b3c7e657bc5c65.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 41KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nkbirgce Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
towgkpnh Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE