Static task
static1
Behavioral task
behavioral1
Sample
0fe1964f5479d709ec1a29a32edd3f80N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0fe1964f5479d709ec1a29a32edd3f80N.exe
Resource
win10v2004-20240704-en
General
-
Target
0fe1964f5479d709ec1a29a32edd3f80N.exe
-
Size
1.4MB
-
MD5
0fe1964f5479d709ec1a29a32edd3f80
-
SHA1
7f0e1daf161a25b55840f1b1d0785f28f5c70a56
-
SHA256
4afae295ffdbc342c0ca21b7c6f04705616f762fef8aff6fe482ab07236e75f6
-
SHA512
42bf8188c0458e5e62e628e1142b734ab01233c78527c991c9a01b2cbcbe3295a60cd8b18b561431e40d2a007cfe7b60fce0ea23c76bd6755713cded62b9fe3c
-
SSDEEP
24576:2wwqaZDlPURBGpx5OqDgY+L6om9Hci6k7GLaKDpcHry1O6zpRTBwSx20x7wTNDD:hwNDl8DG/0Ygm9PL7YaKDpcO1O6z5wSs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe1964f5479d709ec1a29a32edd3f80N.exe
Files
-
0fe1964f5479d709ec1a29a32edd3f80N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE