Static task
static1
Behavioral task
behavioral1
Sample
0c56e194b64da64caa3673788c44868b726f07eb0cad10429dfb7c06c4376f73.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0c56e194b64da64caa3673788c44868b726f07eb0cad10429dfb7c06c4376f73.exe
Resource
win10v2004-20230915-en
General
-
Target
0c56e194b64da64caa3673788c44868b726f07eb0cad10429dfb7c06c4376f73
-
Size
439KB
-
MD5
8fd611d2afdb15b70facb2c3fbee3622
-
SHA1
cc6b8a24c5e8a0cac4e2f6643756283360197615
-
SHA256
0c56e194b64da64caa3673788c44868b726f07eb0cad10429dfb7c06c4376f73
-
SHA512
d8d0684c4d9a1d864aa966d635ce4ece83b70dc2dea90a29c26da2029ac1c5765f5ea3d488440099eb54c45cee316cbccb6956a209e4c5c47ad12bb69365f1c1
-
SSDEEP
3072:ns+RpcZPPPtPPPw4X0jrPckfdvPA95+xJYfuIY7fm5T0zPVVeJAD/oUYX0:nsnPPPtPPPwZcsP25+dIYWTYGJ8/o5k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c56e194b64da64caa3673788c44868b726f07eb0cad10429dfb7c06c4376f73
Files
-
0c56e194b64da64caa3673788c44868b726f07eb0cad10429dfb7c06c4376f73.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ