Static task
static1
Behavioral task
behavioral1
Sample
01ca3759f6cfe85413880bbc9630cdca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01ca3759f6cfe85413880bbc9630cdca.exe
Resource
win10v2004-20231215-en
General
-
Target
01ca3759f6cfe85413880bbc9630cdca
-
Size
12KB
-
MD5
01ca3759f6cfe85413880bbc9630cdca
-
SHA1
b0d35e30b1f1d40a47d9279ef8379b3a63440e67
-
SHA256
9e2a2448797b0f07fd7c10cee0ffb94078be5b74f1698e6d6eaada8f1c60edd8
-
SHA512
df921b3a89c682dbaa1798e298efc1abb9d85fefd54c65b4fa8ae353c5d02bd5f3b6ddab422575db33142aa4ca8c0f07c48bb5757a1eb32674954ca6ceba36ee
-
SSDEEP
48:6VXmca8/Nefm2Mb61/Iw/4AkE0z96YV+gen3u2rK51dqQYRAbTDow7EK6ZYevQti:claFnwAc6V9K1sR8H71yQtQKQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01ca3759f6cfe85413880bbc9630cdca
Files
-
01ca3759f6cfe85413880bbc9630cdca.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ