Static task
static1
Behavioral task
behavioral1
Sample
0ef495dbb73b4e2504e617d7bf097623.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ef495dbb73b4e2504e617d7bf097623.exe
Resource
win10v2004-20231215-en
General
-
Target
0ef495dbb73b4e2504e617d7bf097623
-
Size
228KB
-
MD5
0ef495dbb73b4e2504e617d7bf097623
-
SHA1
92f3cd14dc39eb7ae146ea324799e60b7e4fa876
-
SHA256
84267c255683b345b1a79cb742e14405331a327c936f884a2f9eebd89d333389
-
SHA512
aa7e97e25341bdf51f5f05e49e7b7987a969473a01b6e760eee9acccb14f7bceacf40adf2b5f1c1e2ea16dcafe3a3ecff049e88c58eeab70325e4dd75fb38af8
-
SSDEEP
6144:FO3v71NCBcpW5Rs+7I8k6x2kz0W8JiD/eqm:F471N8+gsj8KkXUB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef495dbb73b4e2504e617d7bf097623
Files
-
0ef495dbb73b4e2504e617d7bf097623.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE