Static task
static1
Behavioral task
behavioral1
Sample
0d9fdf5d8e16f031bd614405a7675ed9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d9fdf5d8e16f031bd614405a7675ed9.exe
Resource
win10v2004-20231215-en
General
-
Target
0d9fdf5d8e16f031bd614405a7675ed9
-
Size
82KB
-
MD5
0d9fdf5d8e16f031bd614405a7675ed9
-
SHA1
ba84bd2f7cb858acc390a17aad137501c1858877
-
SHA256
8eb88b2bd428cc33ea4026e6177318142f537ca561a3211dcaecdec18cc7622c
-
SHA512
404ef3ecbaeb821f3796cec1f93d1eb4499ee7b55f931d172771d237e63f439614bcd4861b39e346ce6e91010a72b2125bbf10d45fb04ecb9d8dee8e87313468
-
SSDEEP
1536:wHqAeL+l5FOKcKwHScWUphgpPaFiJoHSBt50HB3aAdymz97:wHze6lrOywHdVhgjGSBt50h3jvR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d9fdf5d8e16f031bd614405a7675ed9
Files
-
0d9fdf5d8e16f031bd614405a7675ed9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ