Static task
static1
Behavioral task
behavioral1
Sample
0d1e4d5dc13652082acf2c219b42e4ae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d1e4d5dc13652082acf2c219b42e4ae.exe
Resource
win10v2004-20231215-en
General
-
Target
0d1e4d5dc13652082acf2c219b42e4ae
-
Size
94KB
-
MD5
0d1e4d5dc13652082acf2c219b42e4ae
-
SHA1
a2d7eda4703f2c9e21598f948a722c03ba48e72c
-
SHA256
dc1ad58b5318873825ee159d214d434092f46f7b0bf6bbed696326ed590f6c67
-
SHA512
e41708277bdb307f965e46652cacc6481a5b6ef607b0283fc244c6d478a148ce9ec35a34d4fe7310ef68ea8e52c55ecddc5a200b5ae78cfc24c5b33fce3fd97c
-
SSDEEP
1536:WOTwT0iTz9VYaJEDDb9OS86MqEsgL+thXHhhyKrjfFEvI9BYY/aj9vYJSrczrrMf:WOsT0YrYaOb92qEsgGX2Kr6I9BYAaj9z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d1e4d5dc13652082acf2c219b42e4ae
Files
-
0d1e4d5dc13652082acf2c219b42e4ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ