Static task
static1
Behavioral task
behavioral1
Sample
0e3f399f364dc07fe6bb938ed3ee5cfa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0e3f399f364dc07fe6bb938ed3ee5cfa.exe
Resource
win10v2004-20231215-en
General
-
Target
0e3f399f364dc07fe6bb938ed3ee5cfa
-
Size
286KB
-
MD5
0e3f399f364dc07fe6bb938ed3ee5cfa
-
SHA1
5f4ae3bf2ea2fde9e55e9fff3364ba4359f6e384
-
SHA256
e1fd772c3a2182d6117c64b035d397f37b98796edcca55dec5a73e01409e2c42
-
SHA512
4d923df15952997d0f132f0aa1a9824f3ae297762dae1915849f9796a4489f41d926a5992fddf4faa529933a3562bba0ab2ebbebda16c47ebed0d95e48fb672c
-
SSDEEP
6144:8E+lZqvq3O97uH0jHYhFkQkKgZsMuoesdx+k5j4oR75ilLhzColbdHqrcxwg:8E+qDaHVGQRgt5eu55kl9CGKUwg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e3f399f364dc07fe6bb938ed3ee5cfa
Files
-
0e3f399f364dc07fe6bb938ed3ee5cfa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
data Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE