Static task
static1
Behavioral task
behavioral1
Sample
0a31506a86f910d1971bbae061f96786.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a31506a86f910d1971bbae061f96786.exe
Resource
win10v2004-20231215-en
General
-
Target
0a31506a86f910d1971bbae061f96786
-
Size
336KB
-
MD5
0a31506a86f910d1971bbae061f96786
-
SHA1
c6b817ae5953bd243da8b9de35b85acc4a6284fa
-
SHA256
473114c180b8139eafc9dad332ee3b34d397268259bd85a909dbce1e13f652a7
-
SHA512
285a79b34877cbe1a930c92c69b523975b75f9beeaaae90cac5919db2050501a45506d6472785197504cb0d269696d28bc368348a06582a3d7d6c356258b0f44
-
SSDEEP
6144:QmTtauRhycElbTgSpwqAzyhaKWARpC2pq0wAWD9hgXvKBvN18AISxFL8U1x+0v:vpSi2fWX2pqpAWD9gKJN18sxFQUztv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a31506a86f910d1971bbae061f96786
Files
-
0a31506a86f910d1971bbae061f96786.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 300KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE