Static task
static1
Behavioral task
behavioral1
Sample
0e2e16d68efdfecf451d4c622b07f409.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e2e16d68efdfecf451d4c622b07f409.exe
Resource
win10v2004-20231215-en
General
-
Target
0e2e16d68efdfecf451d4c622b07f409
-
Size
769KB
-
MD5
0e2e16d68efdfecf451d4c622b07f409
-
SHA1
69a7b82950bfac8fd692cdb396454247d70ab8d8
-
SHA256
127ceb8f92459e295f64747c5dc3834e8e3e898c3f3f82cc7858688e5c02362a
-
SHA512
ad668ccc744b5d7ee372d53d783e6ac729aabad7479d9c017e415f5268bce0af30a8e370a773941f70302a2f1ac05aa1e6c69a88f2b15578787196da8a96367d
-
SSDEEP
24576:VqU2hZbR0szolHQ0IExgfeF+W8I+Yp4zu:EU2XbAIegfeQWPFl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e2e16d68efdfecf451d4c622b07f409
Files
-
0e2e16d68efdfecf451d4c622b07f409.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 261KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ifc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE