Static task
static1
Behavioral task
behavioral1
Sample
0e8d05d34e5a3140d6f5658579a7f8cf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0e8d05d34e5a3140d6f5658579a7f8cf.exe
Resource
win10v2004-20230703-en
General
-
Target
0e8d05d34e5a3140d6f5658579a7f8cf.exe
-
Size
4.4MB
-
MD5
0e8d05d34e5a3140d6f5658579a7f8cf
-
SHA1
340cba3ca36a9083bf5ff86b8ff953e889775809
-
SHA256
12c756b76157abdca43cf688012470eba0c11401a50b1273aad24ef49afbba49
-
SHA512
14815b04dafdd2149f9657c3bc5aa3e1a360d8658cfce6471e6095884d2957b2d64b532c86635f879b4b895d63bc88ccb3d2fe5eb2803f2eddcf86c57c3057b2
-
SSDEEP
98304:IvniFEnwv1dsFPaMZTf1gNxnZAVKXJO3/ih1DaGPV9D62crI:IPimw3sTDIjg/wX99DpcrI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8d05d34e5a3140d6f5658579a7f8cf.exe
Files
-
0e8d05d34e5a3140d6f5658579a7f8cf.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ