Static task
static1
Behavioral task
behavioral1
Sample
0dfa6e515af0536631d1767adc0e1394.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dfa6e515af0536631d1767adc0e1394.exe
Resource
win10v2004-20231222-en
General
-
Target
0dfa6e515af0536631d1767adc0e1394
-
Size
241KB
-
MD5
0dfa6e515af0536631d1767adc0e1394
-
SHA1
9278e1b7652ebba2e0b949457cdd900cd0386d59
-
SHA256
cf6963a6dd6e1205d0d137a18ec814d8d718083df3b8c8fde61d5ff973bdca7e
-
SHA512
62b64f911e8d22c61260069fb52813fa05bba8dafc6cc3dc95f6e4daf2520cd890af327bf24f8e3a96ea702527236769aa8d16bf0b2cae296320377024b6d76f
-
SSDEEP
6144:FM6Z4o6RVVlooLX7mUaT8pvQj3WP/DsWjObVdE7hRbwfffQy9q6eNpVQA:FMC36zEoLX7VaT8pvnP/H6bV4hRsoyVi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dfa6e515af0536631d1767adc0e1394
Files
-
0dfa6e515af0536631d1767adc0e1394.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ