Static task
static1
Behavioral task
behavioral1
Sample
0c1fe5e37a6e07cb5e710af2f59f54c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c1fe5e37a6e07cb5e710af2f59f54c8.exe
Resource
win10v2004-20231215-en
General
-
Target
0c1fe5e37a6e07cb5e710af2f59f54c8
-
Size
403KB
-
MD5
0c1fe5e37a6e07cb5e710af2f59f54c8
-
SHA1
6c668fc51b9dbc18163cb4016024cb408b504276
-
SHA256
ec9ec7f49f358bf479d4b282ca31684db1074b6bdd68865f8efe3a54b07568c4
-
SHA512
8b2b569c4b877954f4d4f53076fa1794e1f87903c9376881e24e3bbc19d53f4e1daa6cd4e5ffce7b271db0cdd13d94d539f1dd98b699a6fe7af84d8f508e6c89
-
SSDEEP
6144:srYNV197TcXZkQsIF+u1j0Bv85FSlamNGpk9yxT+DZFlXuW7bjJH+jhif:/L97TcXZUIF+IYt8rSlfEpk++Dl+dif
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c1fe5e37a6e07cb5e710af2f59f54c8
Files
-
0c1fe5e37a6e07cb5e710af2f59f54c8.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
A Size: 207KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
B Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
D Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
E Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
F Size: 53KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KAO Size: 569B - Virtual size: 569B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE