Static task
static1
Behavioral task
behavioral1
Sample
0ea05f46863dcd46baf697059181fd5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ea05f46863dcd46baf697059181fd5d.exe
Resource
win10v2004-20231215-en
General
-
Target
0ea05f46863dcd46baf697059181fd5d
-
Size
15KB
-
MD5
0ea05f46863dcd46baf697059181fd5d
-
SHA1
7a3f79b667e186fcfaa9adfe10cd74aa2d04ee95
-
SHA256
60a05c4ecbbb59c1eb38fc27108a6987810bfc57d4ece91f356da8ec82b59d80
-
SHA512
5c52db940a02d7e2a125c2af6044257c17188e3682d0ed446ad8a0cd9188f6e252dfb04153a1b09f3214b851daeb79b12f9d19d5598cedfc6297245bc76ddf7b
-
SSDEEP
384:FFcc2vD/SUSzSoVsxmfftqVeWjktsXy+s:Ht2TWrCUftzWj/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea05f46863dcd46baf697059181fd5d
Files
-
0ea05f46863dcd46baf697059181fd5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE