Static task
static1
Behavioral task
behavioral1
Sample
0c259c9bf923b05b0daf22c8d168c438.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c259c9bf923b05b0daf22c8d168c438.exe
Resource
win10v2004-20231215-en
General
-
Target
0c259c9bf923b05b0daf22c8d168c438
-
Size
18KB
-
MD5
0c259c9bf923b05b0daf22c8d168c438
-
SHA1
b6ae69329b7938e84f71c357ae9d1d0c6453ea60
-
SHA256
119c4d71a510c6b038eb95e3c9cae0b0b73f54406321ffbc261960120a29663b
-
SHA512
fa19488a80b9b164ee8dd796936c0f084109b80fddbcc0a1ec73ca0f2a1552ca1e8d5209eccbd655ac9aa0b5e2a51d26254191619d55f83881a9f39234b6deac
-
SSDEEP
384:Yui2K2eCDFAGQydv+FoHFP0GOdxNRpO6LPbZ7grtAtjQ+bU7DqZp:Yf2aWFZLdvVHlR8dhjZ7grtAtEDq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c259c9bf923b05b0daf22c8d168c438
Files
-
0c259c9bf923b05b0daf22c8d168c438.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
Q4���� Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
4���� Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
>�ek�#� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ