Static task
static1
Behavioral task
behavioral1
Sample
0bcafed8e25b941fdb40cd96d68b5a2d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bcafed8e25b941fdb40cd96d68b5a2d.exe
Resource
win10v2004-20231215-en
General
-
Target
0bcafed8e25b941fdb40cd96d68b5a2d
-
Size
434KB
-
MD5
0bcafed8e25b941fdb40cd96d68b5a2d
-
SHA1
02c66ee4de5bfdeed5795cbf79274a729be30a07
-
SHA256
285080301c41b131e13187ab2f08770e0158afd1ec3b941b1fe7eca20df91244
-
SHA512
0939ea632119fd0dad7dfc7aca961945a17be9c0499c5b83563044c1481b96965be95800366b7a39e95d310d4f62666f1d91e8dd170fcb74743d5e8cf54ee006
-
SSDEEP
6144:nxInaUTSvvdGAkQ+O7tpGkpsPffHdZDcxey0yQU9oimsItQ5O96jpg6G+:APgsO7tpGlPffH/C/xm7Q0Wgq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bcafed8e25b941fdb40cd96d68b5a2d
Files
-
0bcafed8e25b941fdb40cd96d68b5a2d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ddf Size: 395KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE