Static task
static1
Behavioral task
behavioral1
Sample
01e0652ca0accb1a2f2c06d301dcc306.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01e0652ca0accb1a2f2c06d301dcc306.exe
Resource
win10v2004-20231222-en
General
-
Target
01e0652ca0accb1a2f2c06d301dcc306
-
Size
128KB
-
MD5
01e0652ca0accb1a2f2c06d301dcc306
-
SHA1
3a792a735c5d109cf9117214d0ac08f4b80ebdb3
-
SHA256
b4aacfb04ec5e5f0dcc2794187f7f89f02428fbb9f2f9e53b423b2cf54ca7763
-
SHA512
58e20ae86f2dd9c7fe22084e20d4034ac7bfbdf849cc758df7071583be58836cabcc6dfbbc6928d51254c31b2091f4617c80d60388125b0dfcd42651a1a40abb
-
SSDEEP
3072:4pB7AJXdet++Mkve0IbSPpQhGH8E/zSlmUYy6AtVqoNn1w:e7AJXdY+Me8PpQhGH8Qm8FgBXw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01e0652ca0accb1a2f2c06d301dcc306
Files
-
01e0652ca0accb1a2f2c06d301dcc306.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ykfe0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ykfe1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ykfe2 Size: 194B - Virtual size: 492B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE