Static task
static1
Behavioral task
behavioral1
Sample
0a007a3d409fa58dbf8c0c6f84514b9f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a007a3d409fa58dbf8c0c6f84514b9f.exe
Resource
win10v2004-20231222-en
General
-
Target
0a007a3d409fa58dbf8c0c6f84514b9f
-
Size
9KB
-
MD5
0a007a3d409fa58dbf8c0c6f84514b9f
-
SHA1
142f818e591dd08c781447e32b2c34150402bffe
-
SHA256
c80e97574e12cef2d24ae3a21f72a7da9e6c1467895ee50cc8cd95f42e4b1738
-
SHA512
19f7f07253395dc8c1773247fcee09a7fd7276959b18ee6518d5ccbdc17eb8f93523810dd67dc3739dd2b01a88acffc9bf9f98158438599360a4fe53f6be1017
-
SSDEEP
192:UYmPW3l0vdV+i3tsIvZ+ViQjWF0vojw2iCfCehhR:UY52vDlkViQy2vT2iU5hr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a007a3d409fa58dbf8c0c6f84514b9f
Files
-
0a007a3d409fa58dbf8c0c6f84514b9f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE