Static task
static1
Behavioral task
behavioral1
Sample
0ee1841e1b03828c3fefd01acbf10bf5d439245ef224356a2954f782db87afe1.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ee1841e1b03828c3fefd01acbf10bf5d439245ef224356a2954f782db87afe1.exe
Resource
win10v2004-20240412-en
General
-
Target
0ee1841e1b03828c3fefd01acbf10bf5d439245ef224356a2954f782db87afe1
-
Size
289KB
-
MD5
71bc79e18370d0ce020a83b1aa4c04b7
-
SHA1
55208414061912609b15787e20f62e1c38d61823
-
SHA256
0ee1841e1b03828c3fefd01acbf10bf5d439245ef224356a2954f782db87afe1
-
SHA512
9b62938b7294033df9f778becb0b4ab7d4ca1c1bd4409b4a422fd0d373f3b86385de0c81a347a05c56d2787f40599faf63206bb910da6ace8ce3af732d9935ac
-
SSDEEP
3072:vASqNuTUtXk0eGBvvKujeiy3fL/yLwb3ELxD2iG6f4pLthECQT68VMJLaQljVvzS:oSSuUtJRBn7y3fmLNLzkECzJLaQVbU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee1841e1b03828c3fefd01acbf10bf5d439245ef224356a2954f782db87afe1
Files
-
0ee1841e1b03828c3fefd01acbf10bf5d439245ef224356a2954f782db87afe1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ