Static task
static1
Behavioral task
behavioral1
Sample
0ef7a6fd517b4d2d065f672877e6197b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ef7a6fd517b4d2d065f672877e6197b.exe
Resource
win10v2004-20231222-en
General
-
Target
0ef7a6fd517b4d2d065f672877e6197b
-
Size
29KB
-
MD5
0ef7a6fd517b4d2d065f672877e6197b
-
SHA1
0fd13827cc56008f67fc1dc4571797ca1242f23a
-
SHA256
44ffa99c38eec867c94f40555257ecb36cdcf337438b8ede0f34fbd6155cf792
-
SHA512
41e830aeaafd6540a52a25824957985e39fa0c858f371a1928e145843423fc309f270436f785718f45d8cdc6a2a8a33fd681f496a98a07d6515b1f88fc7cd459
-
SSDEEP
768:i2IJxJ4FOpNIbQyM91rrvomdJJFK2QG1Hi8nVkreKfV:IxuFOpNIbQPVrHdTQGl1KfV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef7a6fd517b4d2d065f672877e6197b
Files
-
0ef7a6fd517b4d2d065f672877e6197b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE