Static task
static1
Behavioral task
behavioral1
Sample
02d51c5ea29da83a9ddbce55eaec9971.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02d51c5ea29da83a9ddbce55eaec9971.exe
Resource
win10v2004-20231215-en
General
-
Target
02d51c5ea29da83a9ddbce55eaec9971
-
Size
613KB
-
MD5
02d51c5ea29da83a9ddbce55eaec9971
-
SHA1
06e6ec1dfd616834740aabab65e5e2da70cbda5f
-
SHA256
0c6bfcfcca9ba8f555ca85423dc982ab1d1968536254b49640daa1dc5cdef9f4
-
SHA512
bb817493ca028519a7a26d4213379e4a58ac50257f08b01126fa9e6f12a09dbee71ad89a21efdd05ed00bdbdacab9a04c7060eb82ca70f6a15113ae70195926c
-
SSDEEP
12288:d/9NBCGIe28OPytKPdAsbXhieJLkEcv+jKuUMg83pLtN2O6TTTUt8RpZInnVxKbV:HNcF9NP0UdAsbXMeJLJZKuUn8ZLt4O65
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02d51c5ea29da83a9ddbce55eaec9971
Files
-
02d51c5ea29da83a9ddbce55eaec9971.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 44B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 266B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
haZl0oh Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE