Static task
static1
Behavioral task
behavioral1
Sample
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe
Resource
win10v2004-20240412-en
General
-
Target
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989
-
Size
14KB
-
MD5
9ad096f0fe422942596613f169f2c3c9
-
SHA1
4e7cfaeae8936a49edfc70b86ba36b3c1c427dbb
-
SHA256
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989
-
SHA512
0ca1c98fa46c0f703aca1fc0c88733eff68a5400215153d0b2403ecf0d8a0908c6ac481d2a3a32fec7d815ce153399bc2063fac713a8c919e9163cecb0be4273
-
SSDEEP
384:YYsbyGFOn4jMyIa0JJJJJJJJJthzDE045HMAAA:Yzbyz7yIa2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989
Files
-
0afff231922dd0483ef1bf19ca41e4edef33af54e64db2eb493a99af858fc989.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ