Static task
static1
Behavioral task
behavioral1
Sample
0dfd8593a370dd141ef240c60b0b4c84.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dfd8593a370dd141ef240c60b0b4c84.exe
Resource
win10v2004-20231215-en
General
-
Target
0dfd8593a370dd141ef240c60b0b4c84
-
Size
59KB
-
MD5
0dfd8593a370dd141ef240c60b0b4c84
-
SHA1
2abc235635d9748e6456669b8030ef07142caa08
-
SHA256
e91287f40555d9d805043db8d66fc854ac9573776f48da14fd56ee58fc476cb6
-
SHA512
c0f9c0d74265438c61ba6ab589fc6dfb172e14038a8af9e7d1b28763a7f55ab83fb8a36094ced34a6dbd47d711e04a8cf235d005dcb598f57ef5d7d239dcce57
-
SSDEEP
768:34ayYMjelijq3NJKiHFqHPtlTqjbA/Fr+2dJ1fc06usHrXIX72eQ+w/aZeGpmlPB:oaGA8q95wHPLqw/FxfcLFrXse+jKc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dfd8593a370dd141ef240c60b0b4c84
Files
-
0dfd8593a370dd141ef240c60b0b4c84.exe windows:6962 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
qjyzbzby Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
qqjbyjzb Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjayayar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abriazzz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ