Static task
static1
Behavioral task
behavioral1
Sample
0ec7529e61dea1098d4092adeae94965.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ec7529e61dea1098d4092adeae94965.exe
Resource
win10v2004-20231215-en
General
-
Target
0ec7529e61dea1098d4092adeae94965
-
Size
20KB
-
MD5
0ec7529e61dea1098d4092adeae94965
-
SHA1
e5efb857d4017d07486641fd49cd4872f6e5ffd2
-
SHA256
af15088fd7ed98032a5898bec9d13c23cd55a4daa57a357881938c1dc49d24a3
-
SHA512
e842bd3dbb716ae9ead63a7da0b130609a4aa88f6eb455236f74d82ff678733671b27905210a293b2d6beec04f1bb6172a0a5027f54477847a27f03c2cb90341
-
SSDEEP
384:hCmZ7QC9XpncHM0pdlmJycgla++RrYRdJpIMT5WfKGbj0Si1nu1:hCmFx9XpR0pTe9gcgJ951egSSu1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec7529e61dea1098d4092adeae94965
Files
-
0ec7529e61dea1098d4092adeae94965.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE