Static task
static1
Behavioral task
behavioral1
Sample
0e4db151af139809a82af9f83777d86e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e4db151af139809a82af9f83777d86e.exe
Resource
win10v2004-20231215-en
General
-
Target
0e4db151af139809a82af9f83777d86e
-
Size
9KB
-
MD5
0e4db151af139809a82af9f83777d86e
-
SHA1
d17af5e7929b2031e371315e6471d87601b40759
-
SHA256
2ad038efdf23641808ded4ab596e9f41b42196e10a85b5dfcb3b389901792172
-
SHA512
72ffd7b1a3bdbc49974390a0002382bb34d49130b1de560e50e941fe44fceaedf64e586c1ab74c452d889fe035cd314e901fd2fbf3f2b27b8acb29b7ee69aaa2
-
SSDEEP
192:KBksu7rN3y+oueMZZ3593VnjdwCzM3D1cWR:xZaueMzFnhwCIBcW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e4db151af139809a82af9f83777d86e
Files
-
0e4db151af139809a82af9f83777d86e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ