Static task
static1
Behavioral task
behavioral1
Sample
0dff97d168030570ab8d42d107bd25d4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dff97d168030570ab8d42d107bd25d4.exe
Resource
win10v2004-20231215-en
General
-
Target
0dff97d168030570ab8d42d107bd25d4
-
Size
72KB
-
MD5
0dff97d168030570ab8d42d107bd25d4
-
SHA1
75e1758a8248b7dd04053a38942c7b7e9dc44f77
-
SHA256
6a36872689803b1c413a19303beaa72d2f395415d0670fd5b51ef8d9341f19a9
-
SHA512
01254d150f83e0f9f83161e55865d4b8820cf3273e60cb56bf284b7962785c6f4f7cb4ee31454d07c43d3981e977c633490165f9e44bc0f8ab7b0a89ea8743ba
-
SSDEEP
1536:HT/2HzlWP5J5lnYWXtpW3v2dRN7c52dg9XX/CLKvVAp:HT/4QPr23vYRN7PiX/GKGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dff97d168030570ab8d42d107bd25d4
Files
-
0dff97d168030570ab8d42d107bd25d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.upx0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE