Static task
static1
Behavioral task
behavioral1
Sample
0eeffbcb4e80e25f90e090817076839a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0eeffbcb4e80e25f90e090817076839a.exe
Resource
win10v2004-20231222-en
General
-
Target
0eeffbcb4e80e25f90e090817076839a
-
Size
1.7MB
-
MD5
0eeffbcb4e80e25f90e090817076839a
-
SHA1
a80aa25c8118c541f52338b08f89eb2ec2025dcf
-
SHA256
99a4d09df72d89747822933b74ca9f832cc1f9370be2e8a5172e5d1438cecdb4
-
SHA512
e865d83b38732465f510f6c05e334a5af48516f53216c883e5066dac76a4b084e5315437db1584ae7fd06ddd2803041f6623ec0626f05589942d71254ae990b4
-
SSDEEP
24576:Zfpc0udbE4iUWPNLD0n8fWHBQWMEGRIEQCqFZ5JZJXYxqO4cQZ:ZfeEfU4GGeBQuvJzO4cQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eeffbcb4e80e25f90e090817076839a
Files
-
0eeffbcb4e80e25f90e090817076839a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ