Static task
static1
Behavioral task
behavioral1
Sample
0ecf52e254d78b16e2fffabb36eed38e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ecf52e254d78b16e2fffabb36eed38e.exe
Resource
win10v2004-20231215-en
General
-
Target
0ecf52e254d78b16e2fffabb36eed38e
-
Size
79KB
-
MD5
0ecf52e254d78b16e2fffabb36eed38e
-
SHA1
62604e4baf7c20ac78a68e240dc1c4fdf8299c59
-
SHA256
e756d76dcaf8cf21412c8a94e73230d01d025f2dd0f46cbd070ac64cb14c628e
-
SHA512
814d4cec1bbd7035b4499eb34f21e6ed9b4915f4d9ce7c72f6c6528ea7c8d8e57af1d59c0085f47951e6c5500937f7b09637196d7ec795769d7c29f3c182db8a
-
SSDEEP
1536:wv63nmow4Sgggggggg4P4TMsL83Zp0jFJs3xopQ6tV+PMcRuCD/TW6Bs+6qOn/Za:wi3mKP3pS2xolaMcEt+XwZa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ecf52e254d78b16e2fffabb36eed38e
Files
-
0ecf52e254d78b16e2fffabb36eed38e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 209KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE