Static task
static1
Behavioral task
behavioral1
Sample
0ed6f87ee5c845cf909b1876652711d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ed6f87ee5c845cf909b1876652711d9.exe
Resource
win10v2004-20231222-en
General
-
Target
0ed6f87ee5c845cf909b1876652711d9
-
Size
9KB
-
MD5
0ed6f87ee5c845cf909b1876652711d9
-
SHA1
2c7564dbe40a9a93201a104ac5a0bbc7cb41a79c
-
SHA256
b5000e0844efba27987d588821ee4d27010adf8e22dad4155d104b2ba31b7a96
-
SHA512
b8e213b745a774b5be346bb22cd7b0c5deb4428f03c11ab85f145a6cfb4ed8db3b5f9b4891bf6ffd4face218e959404c4b0ea674d47afa258910bb1afb985ffb
-
SSDEEP
192:xBksuDrN3y+iHqeMZZ3Z93VnjdwCzw3tKLt:6Z2qeMLFnhwC09KL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed6f87ee5c845cf909b1876652711d9
Files
-
0ed6f87ee5c845cf909b1876652711d9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ