Static task
static1
Behavioral task
behavioral1
Sample
0d0aea392af6bb7ea8cd694cd0d5cfa1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d0aea392af6bb7ea8cd694cd0d5cfa1.exe
Resource
win10v2004-20231215-en
General
-
Target
0d0aea392af6bb7ea8cd694cd0d5cfa1
-
Size
31KB
-
MD5
0d0aea392af6bb7ea8cd694cd0d5cfa1
-
SHA1
485105baf2f90bb7581e360072fd5a73fe06795d
-
SHA256
b334606429a68b68aa9025a91a3754e4d956e89303cd1a81d377d810748ff442
-
SHA512
f5242ed6541ec97a55edbee2270481cb3054870965faae21a58ede68639f91a5d42a98a850ba7a797843e3ceeec80cf800b7b4cc45b6408a6440839afbbbcf7c
-
SSDEEP
768:pJzpLuE9Bm8sHe4J6d4sRENDljK/2K3+41N9luPWwM778NqC:pJNa985Gk4sRmDljK/93XN9loWwM778/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d0aea392af6bb7ea8cd694cd0d5cfa1
Files
-
0d0aea392af6bb7ea8cd694cd0d5cfa1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE