Static task
static1
Behavioral task
behavioral1
Sample
0ffb3f71239a5f59572a9e397bb9e46c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ffb3f71239a5f59572a9e397bb9e46c.exe
Resource
win10v2004-20231215-en
General
-
Target
0ffb3f71239a5f59572a9e397bb9e46c
-
Size
596KB
-
MD5
0ffb3f71239a5f59572a9e397bb9e46c
-
SHA1
dcb0452c9a066481abb9592efd602122fb85e79c
-
SHA256
8629295fccb643127d6684d1670e6d6ade434c83822a746eb2592229c96b444a
-
SHA512
a2158d938492ebce020f1f4a0222915ae4187b64a7ce1f8ded5e78445fe1a4c4c8f6dc22e5490a9a53a81383dcca372ce563168550156a8da9b038b193adf8f0
-
SSDEEP
12288:Raad5YgOr8vvvvvEvvvvvARkU8aaF471aEA88MR4713wzMyaahwYhV6:RaaddOwkU8aaF471aEA814713wvaahr6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ffb3f71239a5f59572a9e397bb9e46c
Files
-
0ffb3f71239a5f59572a9e397bb9e46c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.srsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE