Static task
static1
Behavioral task
behavioral1
Sample
0cf677ece3df4d1e17a6566f9e5b1761.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cf677ece3df4d1e17a6566f9e5b1761.exe
Resource
win10v2004-20231222-en
General
-
Target
0cf677ece3df4d1e17a6566f9e5b1761
-
Size
170KB
-
MD5
0cf677ece3df4d1e17a6566f9e5b1761
-
SHA1
7dce390d1cdd9c6458a740bd335e79e9a3e1e1af
-
SHA256
db64160a1d1b005dc1f4f9af066f26dfb76ce8062eebb62dbbbee3678419f4b9
-
SHA512
43bdbfd7ab26997c29bda599903c7cf46c78b8b1ea8c40bb2268dfd135660149f89242a1195eed5e7eb4b21b13e3e77788bbd6093f3d91087f910892afeca2e9
-
SSDEEP
3072:1hv7HqualexVCBFccmvMTdUhyt/LTIckvr5Jls1DNOuwXM29iefs7gEWM5u+77K:1hTHqhgxUYv4dUO/LcckvvlsbOjx9lfF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf677ece3df4d1e17a6566f9e5b1761
Files
-
0cf677ece3df4d1e17a6566f9e5b1761.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE