Static task
static1
Behavioral task
behavioral1
Sample
0634dbaa7e7b5fa4d5f56a2d705292aa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0634dbaa7e7b5fa4d5f56a2d705292aa.exe
Resource
win10v2004-20231215-en
General
-
Target
0634dbaa7e7b5fa4d5f56a2d705292aa
-
Size
9KB
-
MD5
0634dbaa7e7b5fa4d5f56a2d705292aa
-
SHA1
2bc963b250580bb4c6883e9d776e9a0c03571064
-
SHA256
5f057aebed85a059c0971308442c890181fd33403e82b43a3dcc240660bf5ff7
-
SHA512
493c27cad71a2cedc84d47d6b90c10bc1c9cf7298129ab49fc2a525babe32436c667b1fd1a1198a79461f69b6eaa178f3153b81b4bbd8cbbe94f2bd32c493a3a
-
SSDEEP
192:SI4jyJyIobR0crkr/nnN8v5YK06entPpdSTHXlqN+fF1WpX4WmH:bagy5bWXr/nmNGtSTHXlqN+fq4TH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0634dbaa7e7b5fa4d5f56a2d705292aa
Files
-
0634dbaa7e7b5fa4d5f56a2d705292aa.exe windows:5 windows
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE