Static task
static1
Behavioral task
behavioral1
Sample
0db57192c5b48398e141a13e14fa0b35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0db57192c5b48398e141a13e14fa0b35.exe
Resource
win10v2004-20231215-en
General
-
Target
0db57192c5b48398e141a13e14fa0b35
-
Size
512KB
-
MD5
0db57192c5b48398e141a13e14fa0b35
-
SHA1
14cce9b9069436afcbd38e4f9a07863749e729bc
-
SHA256
44aa3cbcd62a8967b474c1b21a2aa4f727edb564abe8744d4d23577a019bc08b
-
SHA512
155d988c8795b8296aa6675735467b961394b7b29a399d32f62aed5827f73dc5e88d1e19f81ecaffe4663177939a604fd0876b005697869628f91cd5204581b7
-
SSDEEP
12288:CNHKuVOgq7sTNTsSRNhnUurKze5aKDM20gNqoUt:CNHpVOjsTNTsSRXnUurKeq20Nr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0db57192c5b48398e141a13e14fa0b35
Files
-
0db57192c5b48398e141a13e14fa0b35.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE