Static task
static1
Behavioral task
behavioral1
Sample
0236385e1eb509de27f65bce78b05281.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0236385e1eb509de27f65bce78b05281.exe
Resource
win10v2004-20231215-en
General
-
Target
0236385e1eb509de27f65bce78b05281
-
Size
11KB
-
MD5
0236385e1eb509de27f65bce78b05281
-
SHA1
1a7385ade34045386ec24cde252edb2b4cea116b
-
SHA256
b5c3960adaf7e9698a1ebff4a56660b9bf7ac54d6f2cfe540fa0fbee02ddbe9d
-
SHA512
0f2728a80c7129f59331a152136f241ddedb06c33564f31a0eaa525fbae24712e07b57f995be5b276f508b9e2617ffd3598bcce7208dddace653cc53436162d2
-
SSDEEP
192:MvxJqAPhpeS1ZK4O3CDHp1QyJXzMYu+KYp5U4ubvRxK:yUAPk21QGMn+KYpu4uFQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0236385e1eb509de27f65bce78b05281
Files
-
0236385e1eb509de27f65bce78b05281.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
. Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE