Static task
static1
Behavioral task
behavioral1
Sample
0dc890e01e78431a14ed7a691617bb49.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dc890e01e78431a14ed7a691617bb49.exe
Resource
win10v2004-20231215-en
General
-
Target
0dc890e01e78431a14ed7a691617bb49
-
Size
19KB
-
MD5
0dc890e01e78431a14ed7a691617bb49
-
SHA1
d53b26cf3bd37207a70cff71fe0e82b8d1b72dc4
-
SHA256
4fef0e1a3fbb59b9fcca1381da6aa9138dfae007951b5cdf05de641946962e31
-
SHA512
5c071bb2811f1b11eda5a700d92aa1da45f311c0aa0331f0848431a8d7d5f8ba994a15033de0b0bdbd9f2fda78fc7a7406afead8159c312defd21f8912ab90bb
-
SSDEEP
384:/h6fWT5B+Igqd9cqJymy4Y5JI0Al3DErwLgLS8WxawDPwwgdpjvXL8E6Ng42nmso:JIWT77VcNqY5JI0+TEm8WxFD2dp7YJ2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dc890e01e78431a14ed7a691617bb49
Files
-
0dc890e01e78431a14ed7a691617bb49.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE