Static task
static1
Behavioral task
behavioral1
Sample
0ec8053cdb20e281ae96f41588007e4e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ec8053cdb20e281ae96f41588007e4e.exe
Resource
win10v2004-20231222-en
General
-
Target
0ec8053cdb20e281ae96f41588007e4e
-
Size
160KB
-
MD5
0ec8053cdb20e281ae96f41588007e4e
-
SHA1
4b3d2c91b24e52e4d44e982db8867bb050fac2ef
-
SHA256
c610ab471418abf6d464e2c10d48b0a16071fb96cdbc122c0531b63e409f6647
-
SHA512
a9191963926e1f6ced49973d2bc0630665111e8b3f1d01a4337dc2df8ac66d682d29301122a16470666d070b4de9abc22a840abde2472d686a85f017128e725b
-
SSDEEP
3072:zMUR3OcMoB+GTRoE3NtWLNrgDaMzNWMKKRZYchObK91C8sV6Xm1:zpecpd2E3NIRgbZuuObR8sVIm1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec8053cdb20e281ae96f41588007e4e
Files
-
0ec8053cdb20e281ae96f41588007e4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ