Static task
static1
Behavioral task
behavioral1
Sample
0debc5c272420387a81d911d515eb533.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0debc5c272420387a81d911d515eb533.exe
Resource
win10v2004-20231215-en
General
-
Target
0debc5c272420387a81d911d515eb533
-
Size
6.5MB
-
MD5
0debc5c272420387a81d911d515eb533
-
SHA1
8bef174b688a13faed5543c3d61bd0ab351d21de
-
SHA256
11761f8d01a3f67c7c2d28451a334440513c1688a0087e99e6a9d4b93ab7ed67
-
SHA512
f8aeb8382620247c549dcfca8507b5c59cb3f2bd468f0a716a03c1ae709c4fa0b0ade4a15fb568bd2c6cad3b49c41dcdc8d4c60aa102c5f063836a6b3e1c1756
-
SSDEEP
98304:wnFPnZNH7jU3YZir2aVm2VG7CJLuM1Fg2RbTh9WdpNPODMn7ziY2aVm2VG7CJLuR:gnZpUPrXVmdCJ1gGfhodpRRXVmdCJ1gr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0debc5c272420387a81d911d515eb533
Files
-
0debc5c272420387a81d911d515eb533.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ