Static task
static1
Behavioral task
behavioral1
Sample
0d408cf17e56fd3b67a366770b44db3b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d408cf17e56fd3b67a366770b44db3b.exe
Resource
win10v2004-20231215-en
General
-
Target
0d408cf17e56fd3b67a366770b44db3b
-
Size
62KB
-
MD5
0d408cf17e56fd3b67a366770b44db3b
-
SHA1
7a6374a2bdc1e68f16eef5e45aedc20e63c78a07
-
SHA256
2e250d7ce8c65dae6bf2f274ae99021625992479e6273c15ba8d25109cc0ab67
-
SHA512
2028aabfc783f7cd74cfa93ea5f7081059e44c795f343ab6bc2818b8dd13dcf809adf56520a842a4b0e2b4bcda756a6a7cb2bf26b3ae006401f3008a1f10666f
-
SSDEEP
1536:TklCn0pjonrkV3SgmzJNk2n35jsn9VOhYFbTsLYdyElnvnV:C7V3Sgk1n35Y/OSYLoy2nd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d408cf17e56fd3b67a366770b44db3b
Files
-
0d408cf17e56fd3b67a366770b44db3b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yhsafe Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yhsafe Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cyclone Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cyclone Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: 191B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE