Static task
static1
Behavioral task
behavioral1
Sample
00e4ee2f1c84b112645ed6b5f445341f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00e4ee2f1c84b112645ed6b5f445341f.exe
Resource
win10v2004-20231215-en
General
-
Target
00e4ee2f1c84b112645ed6b5f445341f
-
Size
2.1MB
-
MD5
00e4ee2f1c84b112645ed6b5f445341f
-
SHA1
73dbf8dfb1f96d27a6143bfb30f0f0cdff703923
-
SHA256
3596fabf44f2463feefbf606cc7516f603d9f021c31713fe0370f362fa928b31
-
SHA512
8ba3b7b590c0f798a215a9d531581ddde79b6caac108e7c0b4a589f615db20113ac6d5a72e335f8253bbbf33adff374147ecbcbad1642b2700186a0734a292c5
-
SSDEEP
24576:829y29y29p7WUtLpwbtLpwIw/rcoJdXN0BN2qnw4a+edxoBrLdgg:ZbtL2tL+4oJdXN0BMOwLloBrug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00e4ee2f1c84b112645ed6b5f445341f
Files
-
00e4ee2f1c84b112645ed6b5f445341f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ