Static task
static1
Behavioral task
behavioral1
Sample
0670ea38e7a0c42e42365d9bd56801cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0670ea38e7a0c42e42365d9bd56801cc.exe
Resource
win10v2004-20231215-en
General
-
Target
0670ea38e7a0c42e42365d9bd56801cc
-
Size
579KB
-
MD5
0670ea38e7a0c42e42365d9bd56801cc
-
SHA1
bd2f4db4b325615ae70790a8f290c8e93ec36a59
-
SHA256
6e7e375dc0236e58eaaa696ded9976a715e6f19f86df17479a435f06cfc4cd97
-
SHA512
cc25ab51565ff8ba50af98d46f08e0eade8ff36605febf5b64c7e49a940a10cb81ebb1b240e075dfea037c92d6abc03439c7867d43a59911af4302552a5e3491
-
SSDEEP
12288:iJCH7uKThTN7o0wzPlHu11bJWYpAdFzWgwy0PpQF5EEN5UJh9cFOa8pAE:o67u8TGloPWYGdFqVhQjj5UZc34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0670ea38e7a0c42e42365d9bd56801cc
Files
-
0670ea38e7a0c42e42365d9bd56801cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE