Static task
static1
Behavioral task
behavioral1
Sample
0fa6a97e6ec2b7b0f8067357d8ecf246.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0fa6a97e6ec2b7b0f8067357d8ecf246.exe
Resource
win10v2004-20231222-en
General
-
Target
0fa6a97e6ec2b7b0f8067357d8ecf246
-
Size
173KB
-
MD5
0fa6a97e6ec2b7b0f8067357d8ecf246
-
SHA1
1aa32ac14b96214b7ffec1735e28435b3275921d
-
SHA256
41a96858d722a1fe5c87f0f06aca3c3c7ee5488d5d93763357b4b5c8c9b44a4d
-
SHA512
85ad4f7113e1310b0e4dfac3555b4e205242ba0650c87460256c94de746f97d5041ef7433ceab1c14da485da4de1b835fbdfde55531558f78d90c9bc050ac443
-
SSDEEP
3072:V/mImlxXFZIe0wq9A/n+Xjd0evPXfMFDTlc9/iVjSD3NPvPzrc77OWw8x8cE:V/mnFZIeB0A/SdFcDTlcE0c769/cE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa6a97e6ec2b7b0f8067357d8ecf246
Files
-
0fa6a97e6ec2b7b0f8067357d8ecf246.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 58KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE