Static task
static1
Behavioral task
behavioral1
Sample
0d64a5db0405e450ccd10385280b4c51.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d64a5db0405e450ccd10385280b4c51.exe
Resource
win10v2004-20231222-en
General
-
Target
0d64a5db0405e450ccd10385280b4c51
-
Size
16KB
-
MD5
0d64a5db0405e450ccd10385280b4c51
-
SHA1
e26e5fa07fcd9d17f791173c82462be78bdc2041
-
SHA256
0786bef3ff132649205eafb0f6e5b5869e2d87dda6e3f908b08cb9562e6aebbf
-
SHA512
17b653eab68bd81ec36298065de01d81f9cee1a5f72002fadb1976e3f8f9697e1c4f630d253c6d1afb24b56dd24d7c140479030f8055ba60235a9357dc45bf0c
-
SSDEEP
384:mnGjW/WajZGOub3ENBrnjTBYCvWDt1drNq:inUgrnjltGLdxq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d64a5db0405e450ccd10385280b4c51
Files
-
0d64a5db0405e450ccd10385280b4c51.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yt>0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yt>1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yt>2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE