Static task
static1
Behavioral task
behavioral1
Sample
0ea954b06d203390c23a4a89c6f32a64698e6fe1f8808a2f465fe172e2220396.exe
Resource
win7-20230831-en
General
-
Target
0ea954b06d203390c23a4a89c6f32a64698e6fe1f8808a2f465fe172e2220396
-
Size
33KB
-
MD5
2f5049298dc2ad7a63ac53493c901f1a
-
SHA1
3cfd70350e6d19387e468e10b93ce65109962992
-
SHA256
0ea954b06d203390c23a4a89c6f32a64698e6fe1f8808a2f465fe172e2220396
-
SHA512
0900f0f1fd2ec2711ca16572afa669dfb0db505ebeca0ceffb438bf4da5d7648dbece1e891cdda5f3a0d5f5f44db69fda72dbe5089c96b3073c571c12ccac64c
-
SSDEEP
768:0/Y2c/eElOIEvzMXqtwp/lttaL7HP4ATCf0vn4DAwdHtLuQN:0/Y2cmaYzMXqtGNttyOf0v4DAyNjN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea954b06d203390c23a4a89c6f32a64698e6fe1f8808a2f465fe172e2220396
Files
-
0ea954b06d203390c23a4a89c6f32a64698e6fe1f8808a2f465fe172e2220396.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE