Static task
static1
Behavioral task
behavioral1
Sample
0235d140f49263fd38ca5a2c986ca6da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0235d140f49263fd38ca5a2c986ca6da.exe
Resource
win10v2004-20231215-en
General
-
Target
0235d140f49263fd38ca5a2c986ca6da
-
Size
40KB
-
MD5
0235d140f49263fd38ca5a2c986ca6da
-
SHA1
b6439a8cf2b08b93c47874aea35f9ae4e3fb4af3
-
SHA256
8fee8a8c780f793157250550e5ab580c8629adec3712069a35402795b5518f1d
-
SHA512
062a9ef27961067ceffca8e59c6bfa4fbac6e3d3aa4a3dc6a3cbf73821496caca8e0d437af7bf7dee8705f24b7965553883c5924072a89eef232c805dc88c8f6
-
SSDEEP
192:gRJhEihMZUliR/B3s64nHIQ6dz3jJy436f3MRAJDg7T6k6ZA3RjS185YyIfOBTFQ:6JhPhMJHs6IXQvKfcRgDg7TuA4fOBJD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0235d140f49263fd38ca5a2c986ca6da
Files
-
0235d140f49263fd38ca5a2c986ca6da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE