Static task
static1
Behavioral task
behavioral1
Sample
0deef666457ca65cf4a718f7c384a436.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0deef666457ca65cf4a718f7c384a436.exe
Resource
win10v2004-20231215-en
General
-
Target
0deef666457ca65cf4a718f7c384a436
-
Size
1.0MB
-
MD5
0deef666457ca65cf4a718f7c384a436
-
SHA1
acd06b52ebf0123b31b22dcb1876989e510359d5
-
SHA256
c5e1bdd0e5c3106f2914e10f783a3a801d59dcc7f1f77b162d99302a4faac8c6
-
SHA512
8a603f961c661baa19b5c63bf1d3618e2d8d84c863b3092a0fa547470ca8b5b717a0c4fb35741f9835096398ec75f9cbb3c6bc57841eadab12fd5b07f315d4b6
-
SSDEEP
12288:C1FFhptUAZ/wBSqa1QrK/q/D/UR1xAWH/7HG/BaaZyZCMTM9TEclXLlvpcm0BA:gF7p/Z/7qLGSzuDASTNbZlMVhDiA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0deef666457ca65cf4a718f7c384a436
Files
-
0deef666457ca65cf4a718f7c384a436.exe .ps1 windows:4 windows x86 arch:x86 polyglot
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.WWPACK Size: 379KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: 33KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 564KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WWPACK Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE