Static task
static1
Behavioral task
behavioral1
Sample
0e873e59d7d80b2d29b9f6d2b460ddfb79e02c634937bd6d9fd11bfe1f2f952eN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0e873e59d7d80b2d29b9f6d2b460ddfb79e02c634937bd6d9fd11bfe1f2f952eN.exe
Resource
win10v2004-20240802-en
General
-
Target
0e873e59d7d80b2d29b9f6d2b460ddfb79e02c634937bd6d9fd11bfe1f2f952eN
-
Size
128KB
-
MD5
cf8793fa317e172ef5e9acb3b36647f0
-
SHA1
79243855a03709cdcec371571ce73d273adebae5
-
SHA256
0e873e59d7d80b2d29b9f6d2b460ddfb79e02c634937bd6d9fd11bfe1f2f952e
-
SHA512
261919eb40899369051c55d628e647bd171936d0d8a52bb96ad2f2b2be9be0a7c30916398b870789b417b1dca5a794717153a83039570f8b02d47223f3119abe
-
SSDEEP
3072:iH/YOt3KbWCNbN4YEBKG7UDd0pCrQIFdFtLQ:K/ONbzE0G7Ux0ocIPF9Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e873e59d7d80b2d29b9f6d2b460ddfb79e02c634937bd6d9fd11bfe1f2f952eN
Files
-
0e873e59d7d80b2d29b9f6d2b460ddfb79e02c634937bd6d9fd11bfe1f2f952eN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ