Static task
static1
Behavioral task
behavioral1
Sample
0f49eeb8236c38410af913de863ddce6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f49eeb8236c38410af913de863ddce6.exe
Resource
win10v2004-20231215-en
General
-
Target
0f49eeb8236c38410af913de863ddce6
-
Size
31KB
-
MD5
0f49eeb8236c38410af913de863ddce6
-
SHA1
087f0a919533c1a0a0c6a14773560ba83b33d5bb
-
SHA256
7b9bd740015b36d47a1b25736a4af741f4519d095cf83c0b2dacc971bbe79a92
-
SHA512
c09d7cffc5954322a34d205f4ca783092dbf1ac186de832d80d6219baa7a55185d6b12c3cbea4eb5443fa167458554cb9e45ec315700b467763e9d5026178fda
-
SSDEEP
768:e27u3vHpR/E4cL+kW1ZorF6HkBqE5rTBw:e263xVE4cL+kW1Zq98E5rTS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f49eeb8236c38410af913de863ddce6
Files
-
0f49eeb8236c38410af913de863ddce6.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 186B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ