Static task
static1
Behavioral task
behavioral1
Sample
0ed2f0f581b9ffeea9d31055f5cdb900.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ed2f0f581b9ffeea9d31055f5cdb900.exe
Resource
win10v2004-20240226-en
General
-
Target
0ed2f0f581b9ffeea9d31055f5cdb900
-
Size
906KB
-
MD5
0ed2f0f581b9ffeea9d31055f5cdb900
-
SHA1
316463fbb92a3cbd3772074af21036375288dab6
-
SHA256
44302a07daf0705a248d06c4f293b66f0b2c22eefa76ecb50f8bbe705971e1e6
-
SHA512
a127084c526cdf8c1cf2136c22d219f564f71e52c455db18a3d7f5a41776394aa0721353de7701201f909af386c6f785ccce70ae6aea2bd7083c05776ff0789c
-
SSDEEP
24576:wUvw1uLsgnwLrvwHqil86QOm3mL2p9+OoNp5xp6:wUvw8w4szIqiqOKmLW+5xs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ed2f0f581b9ffeea9d31055f5cdb900
Files
-
0ed2f0f581b9ffeea9d31055f5cdb900.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ