Static task
static1
Behavioral task
behavioral1
Sample
00f4e3601237d0a310128e3658f809d5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00f4e3601237d0a310128e3658f809d5.exe
Resource
win10v2004-20231215-en
General
-
Target
00f4e3601237d0a310128e3658f809d5
-
Size
512KB
-
MD5
00f4e3601237d0a310128e3658f809d5
-
SHA1
71277fce12772c616458df3f6c1f37a486cb61d3
-
SHA256
39c17bc27edaf31f18aaf0bf1dfd6a0b5fbd37d4f7b8641b142abc4eaa7ce62b
-
SHA512
cacea8a1e097e3b351758df41bf5f4623ad2197903974398398da16bb81a1eca36225a24dbede1a80f1a030c58deb4e7ba98a745ded5509f3bb31ccdb1c01034
-
SSDEEP
12288:1GwVFXL4GPkjyiutxd33XZ48P4hGjgaSl2slRt6yTRXxz9:1RX9MjtutvHX/P2G0aaX7dTpxB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f4e3601237d0a310128e3658f809d5
Files
-
00f4e3601237d0a310128e3658f809d5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 886KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE