Static task
static1
Behavioral task
behavioral1
Sample
0d954642d0336a178a2c41683f1f2ce4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d954642d0336a178a2c41683f1f2ce4.exe
Resource
win10v2004-20231215-en
General
-
Target
0d954642d0336a178a2c41683f1f2ce4
-
Size
184KB
-
MD5
0d954642d0336a178a2c41683f1f2ce4
-
SHA1
6a103d2fd5df42994bc54753e99cfd407851f9aa
-
SHA256
04b565afbfd63a47670f59b2bdc5705816df31d9121613df38159fe9a34f3e72
-
SHA512
2aa3e5ad90d8c19158b626788a2e01b434f435c3014cae7c261fbc88ef9210ca75a85f78c217fd6e305cef97e64a4daac8a6aaf431a448c411b5c7510160ded3
-
SSDEEP
3072:awCKompTSwHYkOC1Mh2/A8wM3xuMdIsOxWUxsZ4dFtlPvpFr:awHoXeYkPM4/A8C/gatlPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d954642d0336a178a2c41683f1f2ce4
Files
-
0d954642d0336a178a2c41683f1f2ce4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ