Static task
static1
Behavioral task
behavioral1
Sample
0e947b4836109d4f3184fda7754ac44d660da760e559b26b877cc6d8377deeca.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e947b4836109d4f3184fda7754ac44d660da760e559b26b877cc6d8377deeca.exe
Resource
win10v2004-20240508-en
General
-
Target
0e947b4836109d4f3184fda7754ac44d660da760e559b26b877cc6d8377deeca
-
Size
14KB
-
MD5
23784fd263a465090678494478417e3b
-
SHA1
3ebb076440a949560f7ca37211a5c3bffeee19a9
-
SHA256
0e947b4836109d4f3184fda7754ac44d660da760e559b26b877cc6d8377deeca
-
SHA512
80a93728bd172d8fb6637213daee62e43de539eb4503862851f2b14626e94992eb574f96253a627702eca9a562f503ac928bb9cffeb2e4dcce0c5ef95dd23198
-
SSDEEP
384:znFU5kEYFvpbf4RHHHHHH8zZ5sf1hDE045H:znF4GbPN50zA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e947b4836109d4f3184fda7754ac44d660da760e559b26b877cc6d8377deeca
Files
-
0e947b4836109d4f3184fda7754ac44d660da760e559b26b877cc6d8377deeca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ