Static task
static1
Behavioral task
behavioral1
Sample
0ed4c9858fb1841ef4bac6d0a29c7c84.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ed4c9858fb1841ef4bac6d0a29c7c84.exe
Resource
win10v2004-20231222-en
General
-
Target
0ed4c9858fb1841ef4bac6d0a29c7c84
-
Size
27KB
-
MD5
0ed4c9858fb1841ef4bac6d0a29c7c84
-
SHA1
4e1aa29c4e41fbd1682c111076bd51dda81c8e74
-
SHA256
f5328d2612b393a94fb07508b8c7a45da5a339451d6b1bb6daae96e9b33b0b36
-
SHA512
03e35533240933a1b75a694158b21ad5c2a19dbdcc43ddec07ed63b78e5accfa5a6404b0d00a700f93b3abac92c1df2b126c84e1b95378449ce03490b16129eb
-
SSDEEP
384:1OioQ6XFU4FY/HuKtElF+yKi2WV/ZAaM04y7lpqswlfSaOFRfnBxIs/+WbWljwmq:0ioQYUiuuWViTxya7CsGaXfBxZe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed4c9858fb1841ef4bac6d0a29c7c84
Files
-
0ed4c9858fb1841ef4bac6d0a29c7c84.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
A}T�pp Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�!Bٍ�� Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uK�o� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ