Static task
static1
Behavioral task
behavioral1
Sample
0977a123456e800d4e3e77df43fe8685.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0977a123456e800d4e3e77df43fe8685.exe
Resource
win10v2004-20231215-en
General
-
Target
0977a123456e800d4e3e77df43fe8685
-
Size
252KB
-
MD5
0977a123456e800d4e3e77df43fe8685
-
SHA1
27f5712346f6b3c29781a6b2d0ed342c70ed3d7a
-
SHA256
265f173af6a9c01d3709fedec6303acd6ebe66877bac7b9555a2a2444c3438d9
-
SHA512
0fd6ccf7c3d49a7d226e30891a8d5fe4fdacfd96920d0c57b250a67eca7b7fd5ab8313862098facf15eef8c2fc276e6288b24b041efec3259ead1ff177e996b6
-
SSDEEP
3072:oWYIXMNKDXkjTYOLI/rmUzQ1zYmF2rR8nKM7fp+Eo4fvknYOikQRmdi7bZJHSdZ:oWXDrk3YOLI/CUzqErR8nZF+RiAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0977a123456e800d4e3e77df43fe8685
Files
-
0977a123456e800d4e3e77df43fe8685.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 363B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 229KB - Virtual size: 386KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ