Static task
static1
Behavioral task
behavioral1
Sample
0d052c87693cdb5d2af3e430ea0201bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d052c87693cdb5d2af3e430ea0201bb.exe
Resource
win10v2004-20231215-en
General
-
Target
0d052c87693cdb5d2af3e430ea0201bb
-
Size
367KB
-
MD5
0d052c87693cdb5d2af3e430ea0201bb
-
SHA1
34435a1c79407f076f4a847b169df771f16b364d
-
SHA256
9f3ad2486cbf90d66c5d2e5b18133acaf244c84ab7d12d1ba0a5532938e1b03a
-
SHA512
dc97a40fa24fc6dc2d5aa83e4bc81d24c9d3f90529f067da013edabdc364e4db8b63555e72096ed354fda74cd5a5f5240ff044bbc0c0ca095cfa0b63a1d25687
-
SSDEEP
6144:sImV8tXNk3lytbg9nLj3SttRsC/labJshjeFYzwe5Pt+6skx7SUy6l:zmGtXm1+kBjAda1shLwIPwjWyQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d052c87693cdb5d2af3e430ea0201bb
Files
-
0d052c87693cdb5d2af3e430ea0201bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ