Static task
static1
Behavioral task
behavioral1
Sample
c1c30d6473e55fe00da7cdbec0abef0542c987bea4c99ea9da847baaaab89119.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c1c30d6473e55fe00da7cdbec0abef0542c987bea4c99ea9da847baaaab89119.exe
Resource
win10v2004-20230915-en
General
-
Target
c1c30d6473e55fe00da7cdbec0abef0542c987bea4c99ea9da847baaaab89119
-
Size
3.9MB
-
MD5
bc7da08116d673f8499c5414b5d401b8
-
SHA1
5264f173e9bfe7e2a830c711cf7794595ce0636a
-
SHA256
c1c30d6473e55fe00da7cdbec0abef0542c987bea4c99ea9da847baaaab89119
-
SHA512
9728e338988f150f36bd0d8c54c2507aad2229ecf14b50dd0b3e839f858a43f57f8777c61d3031e8f57d98ddb894f4b4ee3b1556ce1e00701137faa27fcb1cc5
-
SSDEEP
98304:rJyq4yevxZUbR2zEysXbMU7Vujy35IveSJ9wbn:rJ6yep8vTu0S2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c30d6473e55fe00da7cdbec0abef0542c987bea4c99ea9da847baaaab89119
Files
-
c1c30d6473e55fe00da7cdbec0abef0542c987bea4c99ea9da847baaaab89119.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE