Static task
static1
Behavioral task
behavioral1
Sample
0dc9c7c17d68f01e69d39e92b0a4becf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dc9c7c17d68f01e69d39e92b0a4becf.exe
Resource
win10v2004-20231215-en
General
-
Target
0dc9c7c17d68f01e69d39e92b0a4becf
-
Size
18KB
-
MD5
0dc9c7c17d68f01e69d39e92b0a4becf
-
SHA1
fe597ab996c6bf74cbddcd5bfa67f57b391bd0fe
-
SHA256
8ac6455206f4c10b4a6cb9193704b988d42e07a835cb471601eba2e2a6c0fd19
-
SHA512
c46f6dbbbd93de0bb72e093eea21671280728526756490916b5a5da2909516fb0e83d5e83c25570e07b664eeedc567759bedf6cb218a66fa067be2a051dad3ca
-
SSDEEP
96:pygmKZ+sxdrJomjaXCG8m8DSw0ASsYTXUqRkAL:pygmKZTdrJcXCG8m8WwtSsskAkA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dc9c7c17d68f01e69d39e92b0a4becf
Files
-
0dc9c7c17d68f01e69d39e92b0a4becf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ