Static task
static1
Behavioral task
behavioral1
Sample
0de6630c4756a9e5c4e49033b6ce1fde.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0de6630c4756a9e5c4e49033b6ce1fde.exe
Resource
win10v2004-20231222-en
General
-
Target
0de6630c4756a9e5c4e49033b6ce1fde
-
Size
2.2MB
-
MD5
0de6630c4756a9e5c4e49033b6ce1fde
-
SHA1
5fb049e1539139791594e5275badd5651ba9aaa9
-
SHA256
08e5e98a5bc2697314024ff88d426f325446fd00e9673bb101b013d6d510c6a9
-
SHA512
b9c00e54f399559b06ac9d88cb567009be4ef2ae36af2588203c55f83273f9cd32a3e75d7448f96c67cbb7060cb0c7095421cc2555b5d40562cd8ba22f31ade2
-
SSDEEP
49152:7ib3AIHXMnc1uH97nwSd9gOO6AB6IH1H6gyMXyKS9pVKAJO0TXm88:7ijn8nc1uH97Jd9VABPH1jyMXyL9pVKb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de6630c4756a9e5c4e49033b6ce1fde
Files
-
0de6630c4756a9e5c4e49033b6ce1fde.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ