Static task
static1
Behavioral task
behavioral1
Sample
0cafc789d346726d6725d3da468abadc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cafc789d346726d6725d3da468abadc.exe
Resource
win10v2004-20231215-en
General
-
Target
0cafc789d346726d6725d3da468abadc
-
Size
244KB
-
MD5
0cafc789d346726d6725d3da468abadc
-
SHA1
a22ded562721696418c95549a3393081d4cac094
-
SHA256
575f7dd10ad90187ab1118c7935985c1e58e2349449d94319b073d2bf3b805dd
-
SHA512
53da2baa5363b92dfd65939376ea86106d4e5e0b384877875fd394e15a0883a1bf834205a0bf002de0eec1dfb1abd350fc62094d3b83b972949944e4f428df8d
-
SSDEEP
6144:Tq1/aGLDCMKkdpNAkoSzZYRxAc58ayX2G1x/inPC3g+abVzW0rxLYSD:m1/aGLDCMNpNAkoSzZWD8ayX2MQCw7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cafc789d346726d6725d3da468abadc
Files
-
0cafc789d346726d6725d3da468abadc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 278KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE