Static task
static1
Behavioral task
behavioral1
Sample
0f67e68fc60490678eba48135c4a3941.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f67e68fc60490678eba48135c4a3941.exe
Resource
win10v2004-20231215-en
General
-
Target
0f67e68fc60490678eba48135c4a3941
-
Size
172KB
-
MD5
0f67e68fc60490678eba48135c4a3941
-
SHA1
d0bca19670882791747ed218db155d4c64fc5761
-
SHA256
d3bc014aec5d28fb0cd94f18cc5e5cd672d05bf284f0aff156c368809ce57516
-
SHA512
9bef8a22c22f44139e06c30ea4c23144ba4c1643b2b5e0e88603976e195e76402abe6883b7ee18cc3f2fb3ccd81d941d0d0f2b8def1d3b20265547d6db2308c8
-
SSDEEP
3072:oY2TLV6i6nDeiZ6GsXT/rEzDvOPLqXBIHHclxjRjXSQLVEsp7H7YIfpi3z3cBKx:u0i2kf/QfvEAIQpRjXTVZ7bKrcBKx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f67e68fc60490678eba48135c4a3941
Files
-
0f67e68fc60490678eba48135c4a3941.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE