Static task
static1
Behavioral task
behavioral1
Sample
0c20c4d227aeafb0835adbc0f3fcc825.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c20c4d227aeafb0835adbc0f3fcc825.exe
Resource
win10v2004-20231215-en
General
-
Target
0c20c4d227aeafb0835adbc0f3fcc825
-
Size
17KB
-
MD5
0c20c4d227aeafb0835adbc0f3fcc825
-
SHA1
e3333840e5852d814a85b2d581dd9620900f1c31
-
SHA256
49e3b642274c6c2188bea0184ba527041159a18928c43b2093921ffe3b7e666c
-
SHA512
0ed9c87f5070725678dbc1ec8864d863ca6a983d68082b6130fba80f71a3662e45f72ea12071c4a9d8eccb19a6cf0e7c0c97df2b8cfb74d98ef6323719dae73b
-
SSDEEP
384:LZJWNbfXZ1Qb3P5NP0i24DoaIaYPl37jEzJWOfN3seEFf37V/QlprK:qbna5NPPtsowpSlNi3O3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c20c4d227aeafb0835adbc0f3fcc825
Files
-
0c20c4d227aeafb0835adbc0f3fcc825.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 496B - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE