Static task
static1
Behavioral task
behavioral1
Sample
0df442db36f8310afca14820c4aa9634.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0df442db36f8310afca14820c4aa9634.exe
Resource
win10v2004-20231215-en
General
-
Target
0df442db36f8310afca14820c4aa9634
-
Size
727KB
-
MD5
0df442db36f8310afca14820c4aa9634
-
SHA1
037929a07c4af49a6f6fb6e12f5e33db12bc9c19
-
SHA256
d2ac45c592c3dc67f739d2e4a66896d3ed95e9d138aafebd8b57fa6b661972d0
-
SHA512
10221e769167431b61e607e25b5df97889942593d344145ef59e7a0894c7692fb5658a0fe77b8fe9c241028a7cb7a55de8f116ea32f5ca4444be30fbb77dbddd
-
SSDEEP
12288:obeqqZ0JYYgr8Ix1qymLb54cX0s45+4u+8rTDOTE5w9x6F3Z4mxxDDqVTVOC+J:oKqCuUYyI94cb4x8fyTE5w9gQmXqVTzM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0df442db36f8310afca14820c4aa9634
Files
-
0df442db36f8310afca14820c4aa9634.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE