Static task
static1
Behavioral task
behavioral1
Sample
0dab49d0d14c09941679c01d7f8a0549.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dab49d0d14c09941679c01d7f8a0549.exe
Resource
win10v2004-20231215-en
General
-
Target
0dab49d0d14c09941679c01d7f8a0549
-
Size
45KB
-
MD5
0dab49d0d14c09941679c01d7f8a0549
-
SHA1
3b32c32173a99c26e2ef2920b020dbfa420c8e15
-
SHA256
478c58e0e00e745521a3cc51601b21070b064c650f586e8f4c50e7098410a608
-
SHA512
3893536ae7a4a061c0a7bd2782433980be3ee09661541d1363034368584879a6e66db055f6a6c69e09ee591c344acf6b0290b1d7cc356996fffc8d909769105a
-
SSDEEP
768:UeZyoqxspA8cfleURsA5LEoQDg/LOqTMspG08KBmw/rVCQVPVxhBbkaHbKtpZ0B:pZqf8cfv9LEoQ6aqTdso/nDHUpZ0B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dab49d0d14c09941679c01d7f8a0549
Files
-
0dab49d0d14c09941679c01d7f8a0549.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 81KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 414B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE