Static task
static1
Behavioral task
behavioral1
Sample
0354b2dd925bffacdaf10065bfaec88b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0354b2dd925bffacdaf10065bfaec88b.exe
Resource
win10v2004-20231215-en
General
-
Target
0354b2dd925bffacdaf10065bfaec88b
-
Size
25KB
-
MD5
0354b2dd925bffacdaf10065bfaec88b
-
SHA1
8c3dfef8a710f4b72496d57ef048dd3656d95f25
-
SHA256
c579bca13c6e51a0d6dd76282b0a4ba6b3450fbecf237f463af3acc15cd7f8f7
-
SHA512
2fe5d26065891de734af72b62b3598d26949c835b6ad3fbd11ab9d4ecf534e30ae033a120f123e10465a813b26d5c889967ba1ed7b12660ed7feed2fc158d961
-
SSDEEP
768:iImg24lHCaVR92n+cUq/0FVUBzdHl82uFfVsCl:Hd24lBVn2XF/QVUBzEZVt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0354b2dd925bffacdaf10065bfaec88b
Files
-
0354b2dd925bffacdaf10065bfaec88b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Encrypt Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE