Static task
static1
Behavioral task
behavioral1
Sample
0de4ec68ad4d03ad1b249d06366a3ef22a77c240cf16e9f5686578108835e3d5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0de4ec68ad4d03ad1b249d06366a3ef22a77c240cf16e9f5686578108835e3d5.exe
Resource
win10v2004-20240412-en
General
-
Target
0de4ec68ad4d03ad1b249d06366a3ef22a77c240cf16e9f5686578108835e3d5
-
Size
156KB
-
MD5
689f8073f2d91a77569dd229945f7433
-
SHA1
c1ca0196ba23bab11563d639a02471ebd8cd3457
-
SHA256
0de4ec68ad4d03ad1b249d06366a3ef22a77c240cf16e9f5686578108835e3d5
-
SHA512
9396e1dac8696c03aaa50f72461a9cf2583958384c3753ee7d612e8b99f543b3c70e605865faa94ecae70a3d2ae23143ef269b67997fd43d0ab0f820e126f94f
-
SSDEEP
3072:WDftffjmNox877ZhyW72rwt/+xuqtwOlXOZ8:WTVfjmNjXyWkI/iuiwOlXOZ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de4ec68ad4d03ad1b249d06366a3ef22a77c240cf16e9f5686578108835e3d5
Files
-
0de4ec68ad4d03ad1b249d06366a3ef22a77c240cf16e9f5686578108835e3d5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE