Static task
static1
Behavioral task
behavioral1
Sample
0e9944a68e769e60f718eed8fc9bbe8f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0e9944a68e769e60f718eed8fc9bbe8f.exe
Resource
win10v2004-20231222-en
General
-
Target
0e9944a68e769e60f718eed8fc9bbe8f
-
Size
3.0MB
-
MD5
0e9944a68e769e60f718eed8fc9bbe8f
-
SHA1
fb143881d51567e30d775a6feb9e689e708bf79d
-
SHA256
30a7c17ac7dcfcee1c2f62987bbaaa0161599ebe58329fca444adca7cc1079ee
-
SHA512
6fadab0e61bd497d75f2e79a00be8dfe553b30e0c1ed791c8e4582bdabb6159619a4468e2b92ac1ea32c97cc4554f7d735ab8ba5ddf42fb573277e3ee6f95011
-
SSDEEP
49152:FFbRs47kQlDJqDvpHf2YDiF1yei0UYhNNEHCf/wrCjsru8/q106y0lhOdyj:z7kYD+p/1DEYiPEHC/OOqur0FjEj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e9944a68e769e60f718eed8fc9bbe8f
Files
-
0e9944a68e769e60f718eed8fc9bbe8f.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
P Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
P Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE