Static task
static1
Behavioral task
behavioral1
Sample
0f248818a597e88a8eb65dca4579bf42.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f248818a597e88a8eb65dca4579bf42.exe
Resource
win10v2004-20231215-en
General
-
Target
0f248818a597e88a8eb65dca4579bf42
-
Size
116KB
-
MD5
0f248818a597e88a8eb65dca4579bf42
-
SHA1
258f0698d7ebb4120621750d9f9a553c058c8d54
-
SHA256
59f6a585dbbf80a470511b653e750dec344993215121d6ffe1be1405b393cbaa
-
SHA512
611151430166fc83ae95dcaa4aa97aabe03566223dd68391a04b6526c0229a87386ef2def877ba3ff00c599deb8d5140a0321c6e9318da533e1385b540055bc3
-
SSDEEP
3072:oQUZO6GXKox1jtEC2F28lBTRxXEjdUrip4iQkJdH:oDQdKox1jtECC28l3xXEjdUr44Ts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f248818a597e88a8eb65dca4579bf42
Files
-
0f248818a597e88a8eb65dca4579bf42.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ