Static task
static1
Behavioral task
behavioral1
Sample
002c0ce85fe99492edde40c651b6ba30.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
002c0ce85fe99492edde40c651b6ba30.exe
Resource
win10v2004-20231215-en
General
-
Target
002c0ce85fe99492edde40c651b6ba30
-
Size
333KB
-
MD5
002c0ce85fe99492edde40c651b6ba30
-
SHA1
92554c0d0c766bf14e73552bbc117532801a0f78
-
SHA256
9cbd36763bb917118c2380ddbbbeabf98e83680c43764d1e6c3846079b28cd8f
-
SHA512
b27f319629638b6fdbbec7462e6d4ee8a54217f114fa0a42815380707ccb8b525ad87df18f7d34c19613df7c70d11a1b1a14cc8d142b56e358aedc6bc4361cce
-
SSDEEP
6144:hF2idZecnl20lHRxp3g5ncduD7yB9VCO6Sco4q8+dE6CqU:bF3Z4mxxWDqVTVOCU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 002c0ce85fe99492edde40c651b6ba30
Files
-
002c0ce85fe99492edde40c651b6ba30.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE