Static task
static1
Behavioral task
behavioral1
Sample
0ebff5ed60e259986871bb68415e8ac8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ebff5ed60e259986871bb68415e8ac8.exe
Resource
win10v2004-20231215-en
General
-
Target
0ebff5ed60e259986871bb68415e8ac8
-
Size
637KB
-
MD5
0ebff5ed60e259986871bb68415e8ac8
-
SHA1
f8b337b3c2be99362a6f82b37a576d91d14d3b0f
-
SHA256
c50af2c127aa3d3f234d358f65bb4eec675613e6bb33b488e931852c760d377c
-
SHA512
0c351b3adbb9528ebb77f37dafaaf2e874d96198a4678fe444dd17212c4fd56c05412236970f3812cb8005752bfba47d4a8023242ed40f4cadbfb7b123e75d20
-
SSDEEP
12288:rAXsHQy5fJ1GLk2mHQBmed1hr61DUtLpm1EwtLpm1E:rCsHQy5Sk2z7WUtLpwbtLpw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ebff5ed60e259986871bb68415e8ac8
Files
-
0ebff5ed60e259986871bb68415e8ac8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE