Static task
static1
Behavioral task
behavioral1
Sample
0efe5c28d7d17c19a8699380b00de00c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0efe5c28d7d17c19a8699380b00de00c.exe
Resource
win10v2004-20231215-en
General
-
Target
0efe5c28d7d17c19a8699380b00de00c
-
Size
103KB
-
MD5
0efe5c28d7d17c19a8699380b00de00c
-
SHA1
e7d4eb81e93198d6b90b3ddf7852aa5b22429f99
-
SHA256
f9d4bcfdd092f9be928f97cf9ef71492d64106fef9f0123ff625af6d65f232d2
-
SHA512
54708715cb98e18cf7fe30cd3f38f1bd80c480de6ac1326453a7b4a8536e3937d4a6db441fe017843469c177801d6da6189f4502f9b676d26b59d3d5719b8882
-
SSDEEP
1536:YJSRWVqkSrl6IndUfbG9UMRX4S+8myH62PAoLkvpsLcsx9nPs:YQRWVqkSwInifb4B438cW/LkvRG9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0efe5c28d7d17c19a8699380b00de00c
Files
-
0efe5c28d7d17c19a8699380b00de00c.exe windows:4 windows x86 arch:x86
8727e71bed073f7cf594f73dadf3f32e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit
kernel32
SetConsoleCP
WriteProfileStringA
InterlockedExchangeAdd
UnlockFile
HeapValidate
GetModuleHandleA
GetStartupInfoA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ