Static task
static1
Behavioral task
behavioral1
Sample
0e1c4aaaaf38a0c59f7cbf15b9641fb2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e1c4aaaaf38a0c59f7cbf15b9641fb2.exe
Resource
win10v2004-20231215-en
General
-
Target
0e1c4aaaaf38a0c59f7cbf15b9641fb2
-
Size
2KB
-
MD5
0e1c4aaaaf38a0c59f7cbf15b9641fb2
-
SHA1
48480a63a3694f84dd669bc5af347c4947a1084c
-
SHA256
dca761300399f6bcde5180d06f95fe3df350c936015f3969f15ba2c007154c90
-
SHA512
28ffe3616b611fc6c585bbf40a4b45eb3bac6c403d178e8da096bad361deda4ba48e8289a7c07b954e06382c27df9f0f1c3fd75905a56257d3ab4a9a68ef86f7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e1c4aaaaf38a0c59f7cbf15b9641fb2
Files
-
0e1c4aaaaf38a0c59f7cbf15b9641fb2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21.2MB - Virtual size: 21.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ