Static task
static1
Behavioral task
behavioral1
Sample
0a676f5f34cfaa24b392af877324c021.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a676f5f34cfaa24b392af877324c021.exe
Resource
win10v2004-20231222-en
General
-
Target
0a676f5f34cfaa24b392af877324c021
-
Size
47KB
-
MD5
0a676f5f34cfaa24b392af877324c021
-
SHA1
6e595dfc665516f5d0f8a485a1daf5e223c0de31
-
SHA256
e7c45cc532cbdd47bead00544be114b85846d167a90a7c2f8d6bf8f7440fd048
-
SHA512
741099654e3c277c840f11419048feb36c6fd3983b9eac4e89034f067c5253d5c51f8c70c96c20f961b53d11d5d90c3a8b9ca33bc7e7a8ddbb3a596fc84198c7
-
SSDEEP
768:ZPMF/2U/YSNvZ+tkY8iz/89cln6bWKtCXIEMCDK3uwz0b9giGyU3:lMF/2+xGkY8iz/8Wl6K6Ceawob0yU3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a676f5f34cfaa24b392af877324c021
Files
-
0a676f5f34cfaa24b392af877324c021.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.RIF1 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF2 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE