Static task
static1
Behavioral task
behavioral1
Sample
0e961bfbd15d46c39448739b188a4f72.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e961bfbd15d46c39448739b188a4f72.exe
Resource
win10v2004-20231222-en
General
-
Target
0e961bfbd15d46c39448739b188a4f72
-
Size
779KB
-
MD5
0e961bfbd15d46c39448739b188a4f72
-
SHA1
2317e2ba49af14a17849af60c445dc788f45677b
-
SHA256
450660770841c7411388c9739d53ab60ec701a3a57521df9a6e6c549d2ca5365
-
SHA512
dd449c7f0ac5cc9c1f1a33c11ed882102aff80a60b1d870e5dcef35bd60877c3985f4df9fa573d7fea7a1ee0616c4442c5c484647ff0137a6ba4f6dd6415b14c
-
SSDEEP
12288:aqMxUKf/28u82RTRXxQZc2pQIzWsTC3AnsuF3Z4mxx3DqVTVOCL:nMxUb8c1uZ7iISsTC3AsuQmXGVTzL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e961bfbd15d46c39448739b188a4f72
Files
-
0e961bfbd15d46c39448739b188a4f72.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 463KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE