Static task
static1
Behavioral task
behavioral1
Sample
0ce3e9194736d8f4e557535ffb2d9589.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ce3e9194736d8f4e557535ffb2d9589.exe
Resource
win10v2004-20231215-en
General
-
Target
0ce3e9194736d8f4e557535ffb2d9589
-
Size
176KB
-
MD5
0ce3e9194736d8f4e557535ffb2d9589
-
SHA1
4f79f5eec8c073c026145156fffb3d6dde403922
-
SHA256
774ac9a7770b202f3905a529c97d1faad3e304df1f3bef75dd8dce168e06c118
-
SHA512
ffc84165f4f8abdb391858b0ff7825a3bf175372fa3d48aa0bc4cf15ff9c73349e988f418383ab0254da48a91c66cdc759b34eb33b53a2c1371715f0bdea31bf
-
SSDEEP
3072:fdsReVAwYLTgZcQ9eB3BOR5OE1EM2jASY1atZgn37zpnop2WtXvs3RXAs7j:uReCw0hy92NgvpnoJtEhXB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ce3e9194736d8f4e557535ffb2d9589
Files
-
0ce3e9194736d8f4e557535ffb2d9589.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 39KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.filz Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE