Static task
static1
Behavioral task
behavioral1
Sample
02c057852d2d8395bdddc43faac3009a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02c057852d2d8395bdddc43faac3009a.exe
Resource
win10v2004-20231215-en
General
-
Target
02c057852d2d8395bdddc43faac3009a
-
Size
59KB
-
MD5
02c057852d2d8395bdddc43faac3009a
-
SHA1
1faae1907f236f195f35a19012345a395103385e
-
SHA256
8ac3974cd51a137c09552f069e234c6cc36692d60c350de475516b812dd04b18
-
SHA512
7c2fff600d84328adb51088b2368a605aad52af6cdc09b39e4aff3650bbbd3afea180b3fc883c6ef07d4242ab4638416ea2bd81b1a15f1939637a06f9d5e4190
-
SSDEEP
1536:IuBTQi+ZEDbcBPM85YNEraYRpC4hZ82/Z:fp+6gFM8yE1phZZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02c057852d2d8395bdddc43faac3009a
Files
-
02c057852d2d8395bdddc43faac3009a.exe windows:12486 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
zzzariby Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
qabijraz Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yiyaibyq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yajqiaqj Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ