Static task
static1
Behavioral task
behavioral1
Sample
0f5891afa43d4884080a6b8bde527d3b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f5891afa43d4884080a6b8bde527d3b.exe
Resource
win10v2004-20231215-en
General
-
Target
0f5891afa43d4884080a6b8bde527d3b
-
Size
253KB
-
MD5
0f5891afa43d4884080a6b8bde527d3b
-
SHA1
b3c0774e2a89372a6d5428d88c560646f2ded4b3
-
SHA256
1510d54b25839947d649674d492f2a86783243352a37a842f648690c554e0b26
-
SHA512
f3b7b6560e2959701131b1daf406f1b1b7db160d692fa81273238d5a71d84e585e1f8da1958b095594723aee4ec78c95d0fd36ad39ff92b2964e4bb4fb71034f
-
SSDEEP
6144:LALX74ZrOz7jZDCAJbb3TozWvYb5YVyqWJX5Wy:cX74cZDCAJH3TozWIYYqk5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5891afa43d4884080a6b8bde527d3b
Files
-
0f5891afa43d4884080a6b8bde527d3b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gda Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE