Static task
static1
Behavioral task
behavioral1
Sample
0ee09795f5f3b4b6448ecbdfae327813.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ee09795f5f3b4b6448ecbdfae327813.exe
Resource
win10v2004-20231215-en
General
-
Target
0ee09795f5f3b4b6448ecbdfae327813
-
Size
2.3MB
-
MD5
0ee09795f5f3b4b6448ecbdfae327813
-
SHA1
69653976ce0d4cc231e11aff1c42af24a98809d1
-
SHA256
bd325fc46ba55ba4fe127297680d6008ffda6dd75b04237e66c5a5a13717b1bd
-
SHA512
8b3ecd40b5c1a0eb6cf8c5bd1ae1f8388c35d742118e3934d813beb748c467e0912320bc79912d164b03f2a6009193543fa5af62ed14512edbd21277c6504f86
-
SSDEEP
49152:HmISlCmjdXO7ExvrVydvQppEnFAlLngWVYq+XKcS95syA:GIEvjdXoERAdo8FAlcKYzO9mn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee09795f5f3b4b6448ecbdfae327813
Files
-
0ee09795f5f3b4b6448ecbdfae327813.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ