Static task
static1
Behavioral task
behavioral1
Sample
0de37d6bc8cbc99cca9e5883f6b42a5a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0de37d6bc8cbc99cca9e5883f6b42a5a.exe
Resource
win10v2004-20231222-en
General
-
Target
0de37d6bc8cbc99cca9e5883f6b42a5a
-
Size
47KB
-
MD5
0de37d6bc8cbc99cca9e5883f6b42a5a
-
SHA1
cbbb0a5c773a3e33db4a62b86a4c3e92c8d40e28
-
SHA256
d5b9c8309f0f62087eeecd259aab853f4a9a1d5fb6005333f9fddb2883068113
-
SHA512
ec712f3eb5bd00ba4aff757c12c116b4f19c2f6d474a332614ec8e26d0c8d7747a93b074584659bcb4e7dd6ab0d2f9d3c9290a1ef92f42ada2625c7086092357
-
SSDEEP
768:UONzmZ4x8xpyqM+l48dTSVz/n+AjJVkUKv82YjU+OAf0k9R:FqZLf75g2MEvnYjOAf9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de37d6bc8cbc99cca9e5883f6b42a5a
Files
-
0de37d6bc8cbc99cca9e5883f6b42a5a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ