Static task
static1
Behavioral task
behavioral1
Sample
01e3aa1edf99ab0641203a642c085094.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01e3aa1edf99ab0641203a642c085094.exe
Resource
win10v2004-20231222-en
General
-
Target
01e3aa1edf99ab0641203a642c085094
-
Size
185KB
-
MD5
01e3aa1edf99ab0641203a642c085094
-
SHA1
f751691af376f20892925929681b0de9ec74cf6a
-
SHA256
3aef7090f5ad1c6598f487a95495f9afb5d18a0a44b8d9c24b3ba9cd1283c024
-
SHA512
56695dffa546581f87bcae68bd6d95097c8c14bb3b32ba1bdad88cc334e1592bece3085b4c0dbf59808b764b2d188240a6a436ebc64021d98012b1695e0ded01
-
SSDEEP
3072:j0O213JYdP8tWiSL54Kl2Qsc0+HzsY/XwY/k/kK7TBf4iVhbym1JUJSx:jfpP8tyL5/vscZzsYvl/kj7TBQijbEJS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01e3aa1edf99ab0641203a642c085094
Files
-
01e3aa1edf99ab0641203a642c085094.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 121KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 13KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE