Static task
static1
Behavioral task
behavioral1
Sample
00d1b64ce6b6881c746a398aa7b456d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00d1b64ce6b6881c746a398aa7b456d6.exe
Resource
win10v2004-20231222-en
General
-
Target
00d1b64ce6b6881c746a398aa7b456d6
-
Size
18KB
-
MD5
00d1b64ce6b6881c746a398aa7b456d6
-
SHA1
0a3ab82ff9c2763a2e1ff37b8d892def40bd60b0
-
SHA256
10fb408e96a6285c3abe85673a2ebcf5c140849fbf7d6465104361d39e32e87c
-
SHA512
e834bf7eb3cdd037f5b9187734e4c05b094948cae4ae9a057ffd84a3279a9d1532772f4da1ae885d25c3e20cb50e4451eca10df15fc1d858bd868fc75d23dd90
-
SSDEEP
384:rMj7FEQcOIaX5n5ywt8dww+RgoOQckr0fnS+vFFX4dI3VjGAa9miusLuf3nA:IiQcOvd5f4wv3gkQvS43X4dI3BG99miM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d1b64ce6b6881c746a398aa7b456d6
Files
-
00d1b64ce6b6881c746a398aa7b456d6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE