Static task
static1
Behavioral task
behavioral1
Sample
0c07bcd8fff604472fec00ddb85d56b7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c07bcd8fff604472fec00ddb85d56b7.exe
Resource
win10v2004-20231215-en
General
-
Target
0c07bcd8fff604472fec00ddb85d56b7
-
Size
794KB
-
MD5
0c07bcd8fff604472fec00ddb85d56b7
-
SHA1
83c8452a2732d94d80d5200785889e4d053c5186
-
SHA256
7028850a93af9f8586c9db43e9ddabfb2fd01e005d9f07c8b4a7ada4f4997b84
-
SHA512
2686080bb03a31814b6b5488c6cc0cd7ae7e5329085825dedb53312d9b734dc38dbc5761f9fe4977d7406ef82ab26bed6132f772a8ecee7a53df23781d51d89e
-
SSDEEP
24576:/jWtul2CiV+pqoEoWQmXeF/VCUulKgvtZ:/atv7+pqgvmOZVCUsKgVZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c07bcd8fff604472fec00ddb85d56b7
Files
-
0c07bcd8fff604472fec00ddb85d56b7.exe windows:5 windows x86 arch:x86
fdbfec85672f73d2a4d49635454936d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 305KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE