Static task
static1
Behavioral task
behavioral1
Sample
0d66eadc55274f534d112e1c82cae528.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d66eadc55274f534d112e1c82cae528.exe
Resource
win10v2004-20231215-en
General
-
Target
0d66eadc55274f534d112e1c82cae528
-
Size
315KB
-
MD5
0d66eadc55274f534d112e1c82cae528
-
SHA1
fc1e908ca5f7d3e23185e0cb7005b388b96d7825
-
SHA256
e372e7e6af4b0bb3776fd2f33a54f734628ed4df4e33bd9ab0bb5af80caa998a
-
SHA512
bf96008c81a8e25f380698026b8f06366668989e13680be11fd73da498317c13ac08ffa8ec70aebebf864f95f6e52c132909218e73d43b9498d5d194cbbde4d0
-
SSDEEP
6144:nkQRVYsVaKyMsrqRYFWrO6yAbhkrm9mHQLus/SPofGPi3+qiUumrUX9n:nzRS3KVZt3uB+GPv+Mn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d66eadc55274f534d112e1c82cae528
Files
-
0d66eadc55274f534d112e1c82cae528.exe windows:5 windows x86 arch:x86
97bed9ef4f9823b5668276ae443efdd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
advapi32
RegQueryValueExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ