Static task
static1
Behavioral task
behavioral1
Sample
0da2f39eefa9694ba61080708a53e6c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0da2f39eefa9694ba61080708a53e6c2.exe
Resource
win10v2004-20231215-en
General
-
Target
0da2f39eefa9694ba61080708a53e6c2
-
Size
337KB
-
MD5
0da2f39eefa9694ba61080708a53e6c2
-
SHA1
578b819ba9aae7455aab41183a04da16b3ebb611
-
SHA256
24efbc30bc97803679538a0f09ac0ca4b2b9bf67f64a348af5687a8bf2db574c
-
SHA512
1ffd5df4cfadd4d652e9a48834dbf2e3feee0448c7c020edbf9bfd9bb7d43ee7a43528e0318e288671b2cfa0f5ef84c7bd7ae20c6bb24a08b1adaf30cad61545
-
SSDEEP
6144:9BEUYa/8dHys+vVyPdKyfmbKfkCpe+vVyPdKyfm:9GUYakdHhWbKdpN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0da2f39eefa9694ba61080708a53e6c2
Files
-
0da2f39eefa9694ba61080708a53e6c2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ