Static task
static1
Behavioral task
behavioral1
Sample
0ed04d3bf545d16e27373f1dc8e25b96.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ed04d3bf545d16e27373f1dc8e25b96.exe
Resource
win10v2004-20231215-en
General
-
Target
0ed04d3bf545d16e27373f1dc8e25b96
-
Size
17KB
-
MD5
0ed04d3bf545d16e27373f1dc8e25b96
-
SHA1
002650d60953f287722421d7c88515f9b1e5b73e
-
SHA256
77f47f9710895724ce6dfb153722efdb07c19c704e5754137271760b3afd1dc8
-
SHA512
82052e37e1c3387ba433d3afd4dd91d77362b49f2a35305279f75a6473696add9ba45d241fb80756a1bc03a3c2388366255059e05b600acf85729a76e138a5f6
-
SSDEEP
384:IqTfFGmEb6ec9Jqm+b42wCKt2Xe6w3z8XBcWaFzra8ypNWodXU:TUj8JNndAXGWa28ypN5l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed04d3bf545d16e27373f1dc8e25b96
Files
-
0ed04d3bf545d16e27373f1dc8e25b96.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 1KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE