Static task
static1
Behavioral task
behavioral1
Sample
0f8cfa8528d9e420f58043079ca5b0db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f8cfa8528d9e420f58043079ca5b0db.exe
Resource
win10v2004-20231215-en
General
-
Target
0f8cfa8528d9e420f58043079ca5b0db
-
Size
3.3MB
-
MD5
0f8cfa8528d9e420f58043079ca5b0db
-
SHA1
b09a153b98af57fe544e868c4193733d23a4232b
-
SHA256
684eda5f8d5184ee743ea3fac5862e74ea38af91bf93ef474673c84726068338
-
SHA512
cf8ae0169c6cf7770f34b79b468600481e9a88304786e61daea557c3a1274080788089d7fcfc874a01928233a002a774dcfe930688e0848d8bd67279c1410d55
-
SSDEEP
98304:5H+xS5Jin+9rVI0RdTH5EekyjxS5dOMJQ:6Wwm5xjz5NkyjxWO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8cfa8528d9e420f58043079ca5b0db
Files
-
0f8cfa8528d9e420f58043079ca5b0db.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE