Static task
static1
Behavioral task
behavioral1
Sample
c0ab92024149d89362b285d15244e82909e713bd30a9b11adff12488197d4f65.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c0ab92024149d89362b285d15244e82909e713bd30a9b11adff12488197d4f65.exe
Resource
win10v2004-20230221-en
General
-
Target
c0ab92024149d89362b285d15244e82909e713bd30a9b11adff12488197d4f65
-
Size
2.3MB
-
MD5
8b680fee3037740ed9fbd6d63ab67624
-
SHA1
0be0a8bc5d7857b015d90fef87feafab64767de1
-
SHA256
c0ab92024149d89362b285d15244e82909e713bd30a9b11adff12488197d4f65
-
SHA512
edb9c9b89adfaa67f99fd99d7892ebcae2968055bd278994ce0c97c432e7fe7b51686da01018392a14ded399511e98ecce4596400cf8b6452ca24e245f74863b
-
SSDEEP
49152:54vdi8aM5CHrjH3tpLvSTzLYl0CHjKlVLd+:54
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0ab92024149d89362b285d15244e82909e713bd30a9b11adff12488197d4f65
Files
-
c0ab92024149d89362b285d15244e82909e713bd30a9b11adff12488197d4f65.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ