Static task
static1
Behavioral task
behavioral1
Sample
d0ee97949d5198bdfa23b7f50f51fc44af3001cdfd33b6f907df749cb5bf628f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
d0ee97949d5198bdfa23b7f50f51fc44af3001cdfd33b6f907df749cb5bf628f.exe
Resource
win10v2004-20231023-en
General
-
Target
d0ee97949d5198bdfa23b7f50f51fc44af3001cdfd33b6f907df749cb5bf628f
-
Size
4.4MB
-
MD5
e2496aeb8076dac76a90215dcb27c2e4
-
SHA1
eacf71bd634528fe4f6cd21b642ad1cdf0762c1d
-
SHA256
d0ee97949d5198bdfa23b7f50f51fc44af3001cdfd33b6f907df749cb5bf628f
-
SHA512
5ab6dfd41e8a412f7f746e198f34c937425b9809c217b43c508be3039c9a83fb8c08f5808568a9d26c500a265abc4e2c5ac576de3c16a960c62b1d9c40cac505
-
SSDEEP
98304:0OavURiG1aAGIh2NbceYfXwkqjdinnXMqBLVP2JF8t/R6kY:uvMFaKObcFfXw7jUXvreJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0ee97949d5198bdfa23b7f50f51fc44af3001cdfd33b6f907df749cb5bf628f
Files
-
d0ee97949d5198bdfa23b7f50f51fc44af3001cdfd33b6f907df749cb5bf628f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 348KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 416KB - Virtual size: 929KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 28KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ