Static task
static1
Behavioral task
behavioral1
Sample
0c5f374064ab6941bfed2c23962a2e4a51c6de6c54e224e843057030f532e5bb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0c5f374064ab6941bfed2c23962a2e4a51c6de6c54e224e843057030f532e5bb.exe
Resource
win10v2004-20230915-en
General
-
Target
0c5f374064ab6941bfed2c23962a2e4a51c6de6c54e224e843057030f532e5bb
-
Size
1.6MB
-
MD5
5074424b5bc153c0090ab89fb1e9c4ad
-
SHA1
14760921e6fc6168baf9c10507056ed71d98bdf1
-
SHA256
0c5f374064ab6941bfed2c23962a2e4a51c6de6c54e224e843057030f532e5bb
-
SHA512
2394bbccf20b8f94d8997ee6454c93c9e3d81afc9b99101cfda03c6778d4a7224c442560decdefc1f0f2b7aea2cf2ac4588b9684090ee0fa74df1efbaf0165fb
-
SSDEEP
24576:ki6/JL130obUM5gD60tIXh7YgNZBOMXWovKqV5ACYl3GaUvJA1tLtiEt7KCxWLDk:Nu0oZx5DY35A2tLwEJK439Ml1y9cG1f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5f374064ab6941bfed2c23962a2e4a51c6de6c54e224e843057030f532e5bb
Files
-
0c5f374064ab6941bfed2c23962a2e4a51c6de6c54e224e843057030f532e5bb.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 111KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 944KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ