Static task
static1
Behavioral task
behavioral1
Sample
0e67d36a90d9f514ed96a1b5a0a81a44.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e67d36a90d9f514ed96a1b5a0a81a44.exe
Resource
win10v2004-20231222-en
General
-
Target
0e67d36a90d9f514ed96a1b5a0a81a44
-
Size
10KB
-
MD5
0e67d36a90d9f514ed96a1b5a0a81a44
-
SHA1
2de9aa8053b5e8d304201a994fbd7a5f6ffd42af
-
SHA256
1acb18ff3646df6bd3b17ea55dd6e66ce1b6b1af1dbf758b0b5dc5f52c93b789
-
SHA512
6426f0e7a32a521576412af09b7e8f96e0fdab8ce3dd65cd2255ae2fcffeab3b7b44c8345b954d0d3fad54f00de8e06b9e43583e10104a4091e0f38c36c836cb
-
SSDEEP
192:i8OlZTgJiWxpW5bCGD1NHpGZCd05I1jjhvhi9DYYZYTbe:yMDW5fkCb1jW9kY2Tbe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e67d36a90d9f514ed96a1b5a0a81a44
Files
-
0e67d36a90d9f514ed96a1b5a0a81a44.exe windows:1 windows x86 arch:x86
3363f71fcfe71e19b56b9f32df7ea680
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
IsBadCodePtr
Sections
.text Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE