Static task
static1
Behavioral task
behavioral1
Sample
0eb6be7ffff97bf8f0fce8031c20f27935bb7c09c6821eb790a92146490f3518.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0eb6be7ffff97bf8f0fce8031c20f27935bb7c09c6821eb790a92146490f3518.exe
Resource
win10v2004-20240419-en
General
-
Target
0eb6be7ffff97bf8f0fce8031c20f27935bb7c09c6821eb790a92146490f3518
-
Size
14KB
-
MD5
8c9868f36c81650bb15458e6d1b4594d
-
SHA1
8d35c9606036ea9e8da99e28fc2fc317e724adf5
-
SHA256
0eb6be7ffff97bf8f0fce8031c20f27935bb7c09c6821eb790a92146490f3518
-
SHA512
0882de9d2b6dd07b816f79f50afdad56e1250be7e90f21e6d77c054bc1a005c5d0d72f5f900fd99b3751e58a2d84683151f4c1f83a2b540cf067927fa081cf69
-
SSDEEP
384:UhHQjxRXJvFXf2R1CeeeeQPPPPPPca378+DDE045HWgggg:UujDRpheeeeFar8+/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb6be7ffff97bf8f0fce8031c20f27935bb7c09c6821eb790a92146490f3518
Files
-
0eb6be7ffff97bf8f0fce8031c20f27935bb7c09c6821eb790a92146490f3518.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ