Static task
static1
Behavioral task
behavioral1
Sample
0c1b83dbb175a55764df443684cf54a1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c1b83dbb175a55764df443684cf54a1.exe
Resource
win10v2004-20231222-en
General
-
Target
0c1b83dbb175a55764df443684cf54a1
-
Size
20KB
-
MD5
0c1b83dbb175a55764df443684cf54a1
-
SHA1
c5f4fc42a41f210ed2710306ac7b287956afd8ef
-
SHA256
194dbd3804b70458b4372d54e94407edb755d73ed8a0236b8167ded6baa91988
-
SHA512
0308a1300a9834f51352aa42f17df4f393c2648796f00a010d0d97656a89dcec6f8a79e0dc909dfa2eb183deb0d8bfbb8f1f8d7a300054d1200d5e760d8567c8
-
SSDEEP
192:72kHsIXeXc8Ggq60kGC4XnRKPDX04q+VyC:72PIXi4eyRADX04q+VyC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c1b83dbb175a55764df443684cf54a1
Files
-
0c1b83dbb175a55764df443684cf54a1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ