Static task
static1
Behavioral task
behavioral1
Sample
0d7c138ba6b195cc4d629d898583ae80.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d7c138ba6b195cc4d629d898583ae80.exe
Resource
win10v2004-20231215-en
General
-
Target
0d7c138ba6b195cc4d629d898583ae80
-
Size
411KB
-
MD5
0d7c138ba6b195cc4d629d898583ae80
-
SHA1
259dad8a398a9a0651b29427eafee6c21eface52
-
SHA256
b16a22c62012928df5a9c3558d45a617f7634f20d2cc3e7b5f775a22fe1a25c8
-
SHA512
ddc3506c7601dd3b35458a1f5517572c3f1350cdd451a8755b13c8c58669723f0ca51e2d4f7f44775cadc5e47bba562513032a5ee7bdeef35fd6866248dc2269
-
SSDEEP
6144:ZwOi9kNq6Icf0SnY8wwvhA3jO1x20n6IFKKF71lmc2Gzd5p9jaSSbzENSE/h+zl:AqNqC0mY0hAzO1M0H91lm/OTPqHWozl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d7c138ba6b195cc4d629d898583ae80
Files
-
0d7c138ba6b195cc4d629d898583ae80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 311KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE