Static task
static1
Behavioral task
behavioral1
Sample
0ec9d194ca6a4d5db7452b944f9f3430N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ec9d194ca6a4d5db7452b944f9f3430N.exe
Resource
win10v2004-20240709-en
General
-
Target
0ec9d194ca6a4d5db7452b944f9f3430N.exe
-
Size
11KB
-
MD5
0ec9d194ca6a4d5db7452b944f9f3430
-
SHA1
bbebb470c87ddba086ca8dc9ad137b889ceda3cc
-
SHA256
664588e1f5c49f51ebade92564704b03863d91aa796afead2e4a1adc24d8a4ee
-
SHA512
61a8e4913a35f608c98b3ea75cfbff9cd024cab23011b8f7dff91c98da6b0dd768bf395f7bdedf3bcaefdf5c3509ed6201aa2af2e032088dc84c77dee9df3c97
-
SSDEEP
192:HUthTRMFbuWQcFh1ffhBsGcNG1bSmIvza6qVlPzPx/CCqHGevv4RhBzGULKd3Yc/:0thTRibDQyjfhBsDNwHBVlLZ7qmevv4Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec9d194ca6a4d5db7452b944f9f3430N.exe
Files
-
0ec9d194ca6a4d5db7452b944f9f3430N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
4l53wwve Size: 37KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4850nqli Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4904cxje Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE