Static task
static1
Behavioral task
behavioral1
Sample
0dd4a9a6b294299a0952aa290649e3dd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0dd4a9a6b294299a0952aa290649e3dd.exe
Resource
win10v2004-20231222-en
General
-
Target
0dd4a9a6b294299a0952aa290649e3dd
-
Size
26KB
-
MD5
0dd4a9a6b294299a0952aa290649e3dd
-
SHA1
4a9ef2676d7ef681167a337a7116271dc14508e3
-
SHA256
245097b2931ef18629f3baa844f27a8239fb5daa5dabe02c683264ee5c2b859e
-
SHA512
9133c97cc5951573d3754103f87e2ce59bb15f65e48f0b0f63574d7fdb25b791e84d92aafd8fa803501983f4986c894a28fd6af3f4b35a5a276a8e4175fa8eb2
-
SSDEEP
384:VfXr19tBlhG5CRZ8e5YFOHeCA3ykYudk73tbPcmqSyN6SmRR6BxIvOe:hrLG5EZ8pseC2ykY/3tbcEyN6SqR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd4a9a6b294299a0952aa290649e3dd
Files
-
0dd4a9a6b294299a0952aa290649e3dd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE