Static task
static1
Behavioral task
behavioral1
Sample
0de5d3bf7a486c88a664fbaa1bfe5ee9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0de5d3bf7a486c88a664fbaa1bfe5ee9.exe
Resource
win10v2004-20231215-en
General
-
Target
0de5d3bf7a486c88a664fbaa1bfe5ee9
-
Size
91KB
-
MD5
0de5d3bf7a486c88a664fbaa1bfe5ee9
-
SHA1
97a7b1211023fd43e4b61286f5e422f50d51d684
-
SHA256
b5676ca5b5c65128d51a6a92bbfcffda1e26c131882098ab64fcc19e325560eb
-
SHA512
60cdb4b108a65b38fe3de8a88cf3026f55b56d5440f4d83ddb115ac8e74d6d195febbcf2c4f43948b4f4f9eaf718d62d08323db0d2567968492605de256e3c74
-
SSDEEP
1536:TEnnP/DHQrYAnMs/9/5UoMgYvHYXZZ9ilEMmqBibVPcrO1ZMxYj7/KM4lJYHqZxW:TEPbGph1/GvgpZ6mMmiqCy1Zjj7/fNHT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de5d3bf7a486c88a664fbaa1bfe5ee9
Files
-
0de5d3bf7a486c88a664fbaa1bfe5ee9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 412B - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE