Static task
static1
Behavioral task
behavioral1
Sample
0f579dede513c190106685dd6f3c1214.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f579dede513c190106685dd6f3c1214.exe
Resource
win10v2004-20231215-en
General
-
Target
0f579dede513c190106685dd6f3c1214
-
Size
283KB
-
MD5
0f579dede513c190106685dd6f3c1214
-
SHA1
87283ea27e1f36f27c96baaa63202b722f94b205
-
SHA256
11141517e7febfe20cedd2d8d72f5180f4884d02469e329fe752ee7c17fbdd71
-
SHA512
eff76eb12a99f0800c5dbb71c232a4a8d6080c5619552e2eca212668cb9821e7d5fe14a5431082274d1de5f62021d755d16f36dbdf5672562046d395be8404be
-
SSDEEP
6144:/OVuhQJTINX8tcPyQ+xbWkk8tr7gCjTdGPw+TKcRXF3vk/Sy17MBc/q3YOXH:2VuhQJT8OcKQ+xq47gCc793vk9+WqoGH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f579dede513c190106685dd6f3c1214
Files
-
0f579dede513c190106685dd6f3c1214.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE