Static task
static1
Behavioral task
behavioral1
Sample
0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9.exe
Resource
win10v2004-20241007-en
General
-
Target
0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9.exe
-
Size
17KB
-
MD5
f8a9322518123f8dfa7e2e4b02e21656
-
SHA1
0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9
-
SHA256
ffea9176cfb8f8c009dfc8c1c4db6385e0155497dc42cd0e3dd356371c4089b8
-
SHA512
fca2e548bb333ac59a4803ab783c5b4bfb466c5f7f59bcb787675db7c4444beafae9fe97beeb272c680f1573f204b864cd06a95cfcfb863e15f4c489732d3bae
-
SSDEEP
384:OEEoLO56ayzcMj+uZvAc00EUGvQPCcmL6neqlkXMj/79Wx:RE8O56lcVuGv0TPCcfexX+79Wx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9.exe
Files
-
0f7fff304e0fe1a4bc0ca5eef9d34cdb6d2b43a9.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ