Static task
static1
Behavioral task
behavioral1
Sample
0ea85673f72b10b325a0e1f05ced2d18.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ea85673f72b10b325a0e1f05ced2d18.exe
Resource
win10v2004-20231215-en
General
-
Target
0ea85673f72b10b325a0e1f05ced2d18
-
Size
180KB
-
MD5
0ea85673f72b10b325a0e1f05ced2d18
-
SHA1
711d36bff1f7df789c4809be3b21093ff7c34cf0
-
SHA256
42f22b14a8639a43dc2499f29e6f2cb52ac9f4214b243c411bb17546de4b1212
-
SHA512
ef1ec3cc51ee3ff2f5fda5daf6922ecf05d0e77d6adfcef4dc68e518f24e6e6a50ab2fe4f6b254ad348f42a76dca0a4af08c96c398d4a0ab53e860f3e9629439
-
SSDEEP
3072:mEwSccsWlXCFLcVygjJYlGqAmcfqfXI5bdku:mELDCsYEmcifeku
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ea85673f72b10b325a0e1f05ced2d18
Files
-
0ea85673f72b10b325a0e1f05ced2d18.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 379B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ