Static task
static1
Behavioral task
behavioral1
Sample
0a7251cfb26d948fd0f857c9479d539d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a7251cfb26d948fd0f857c9479d539d.exe
Resource
win10v2004-20231222-en
General
-
Target
0a7251cfb26d948fd0f857c9479d539d
-
Size
59KB
-
MD5
0a7251cfb26d948fd0f857c9479d539d
-
SHA1
3f7e45837fd418e58ee820b4b606286d324142d8
-
SHA256
2b9bc7bbb3fd5dadf1f21614fbe61c8e64928a012e5087464390a2f70a842f17
-
SHA512
d7d94879f03eb29c263bce6a664958ba24c4d73782bade829f07de4c4fa48954c0f4cf5d9bb13b638d73256e648444a3568357b24a555b90ff3c6790f405542a
-
SSDEEP
768:w94eF/xRPezSSAjsxSwAZ7ndYqaD1hXdQhB+D2OnlsH5K4P9f8fmgBQ7B6w9dmdg:0nzRmz/O/459K+q8KZK4P9fmsGdrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a7251cfb26d948fd0f857c9479d539d
Files
-
0a7251cfb26d948fd0f857c9479d539d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ