Static task
static1
Behavioral task
behavioral1
Sample
00cfbabf32ed11fc98b49c5d093e90db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00cfbabf32ed11fc98b49c5d093e90db.exe
Resource
win10v2004-20231222-en
General
-
Target
00cfbabf32ed11fc98b49c5d093e90db
-
Size
223KB
-
MD5
00cfbabf32ed11fc98b49c5d093e90db
-
SHA1
05d62dd53caf381b51af80477b938ab095533949
-
SHA256
e0bd0114094668c37472ee0dd8e1bd6a6336440bae44bb535c55247d6dbaca17
-
SHA512
ea9a1e10d417f8cf24f79d0f62b5fe1c6f0efe230676283baf5424a05b8332d29be6e80ca0b0608d0f57959f8cc06780d12e3244db169e875ce087ff695f4baa
-
SSDEEP
3072:UySUGzHeu/Ubb+XgiTzWeQTgK1N3pnBrsFWj2nrotf6p+iDP2BA7R1eT+Nzx:uUGzHeu/6bmTcYWjY1DP2BCCapx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00cfbabf32ed11fc98b49c5d093e90db
Files
-
00cfbabf32ed11fc98b49c5d093e90db.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 209KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE