Static task
static1
Behavioral task
behavioral1
Sample
000d63a64dc18e25614743f763c2aeaf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
000d63a64dc18e25614743f763c2aeaf.exe
Resource
win10v2004-20231222-en
General
-
Target
000d63a64dc18e25614743f763c2aeaf
-
Size
18KB
-
MD5
000d63a64dc18e25614743f763c2aeaf
-
SHA1
d02202466efae3215e885343bce5e13440b31a6f
-
SHA256
e2d3dafc59ad67154d4cf3d11bff68ca334c867c5f7fb757af8bec01d2e54842
-
SHA512
9fc78ad11914cf54f07ebd3d7b40e59a8332a7d7d7bc55ddc0d3521fe04c37ae814420c75dde1d17359644e2fe12b05135acbbbb6aa751c44a8418aa97b7ee8a
-
SSDEEP
384:bQ00crMPJYnnFMCKe9L628JaPyYXn8b39z9vR:000cAP6nKkL63kE9z9v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 000d63a64dc18e25614743f763c2aeaf
Files
-
000d63a64dc18e25614743f763c2aeaf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE