Static task
static1
Behavioral task
behavioral1
Sample
0dfb4cb3d21e241c2c1c0ec1e9cfdf8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dfb4cb3d21e241c2c1c0ec1e9cfdf8b.exe
Resource
win10v2004-20231215-en
General
-
Target
0dfb4cb3d21e241c2c1c0ec1e9cfdf8b
-
Size
570KB
-
MD5
0dfb4cb3d21e241c2c1c0ec1e9cfdf8b
-
SHA1
2e3e97263ce39db01c97aa8c3b41f6daf437c59f
-
SHA256
bc3a39e83ea5fafc11dc1cd122ff54610c482b404ae96be102daf8606ec41460
-
SHA512
8b2d247a0609a8adc197c8efc665815b017de7f1b22d58e7443a3f96f75120864cd549ff15e3de31d99fce19678213b0bd0fe46537669faf30f16aee5ecde2c0
-
SSDEEP
12288:BR0W1K3DnsxsbKKPjZNuSIw7uBflYN0ThoVLCNMRQ3MATMOqHpklS:n0W4DsxsbzcflYN0S1CSQ3lTMTHpL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dfb4cb3d21e241c2c1c0ec1e9cfdf8b
Files
-
0dfb4cb3d21e241c2c1c0ec1e9cfdf8b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 31KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 147KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE