Static task
static1
Behavioral task
behavioral1
Sample
0c4e2ddef2598de477b836a3f09483e7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c4e2ddef2598de477b836a3f09483e7.exe
Resource
win10v2004-20231215-en
General
-
Target
0c4e2ddef2598de477b836a3f09483e7
-
Size
20KB
-
MD5
0c4e2ddef2598de477b836a3f09483e7
-
SHA1
f09769faee68cbf89ab8d32d2e89ef02cdf4a7ab
-
SHA256
6d2cbf68428de5ce293e334e4a87f27a15eea403485a6d8972925daf4ebb8800
-
SHA512
1c622ef8e4063b8696b804effb6cf96659f3cab9baf9f85b31e05c15838c8115d7a1dc795eb9385b0b563cb9bb215f62ef37f34cc974a848f84f45c774ee0858
-
SSDEEP
384:w6JENl58SuIDYIGJa5NVxB4kF6UF9ZRkUEhBZBz6ZmvsUjN0jblq4Cx5Gbnc:w6JMXcsNVxbF9ZRkUEhvoMvVjN0jJMq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4e2ddef2598de477b836a3f09483e7
Files
-
0c4e2ddef2598de477b836a3f09483e7.exe windows:4 windows x86 arch:x86
fa40092e01a5603aac549ef8d25ede67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateHardLinkA
FatalAppExitA
EnumResourceTypesA
FormatMessageA
EnumSystemCodePagesA
GetStringTypeA
ReadConsoleOutputA
FindFirstChangeNotificationA
DefineDosDeviceA
GetFullPathNameA
FindNextFileA
user32
CreateDialogParamA
CreateDialogParamA
LoadImageA
CharPrevA
GetKeyboardLayoutNameA
LoadMenuA
GetMonitorInfoW
MessageBoxA
LoadMenuA
gdi32
CreateScalableFontResourceA
GetTextFaceA
CreateFontIndirectExA
CreateFontIndirectExA
Sections
.data? Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icode Size: 13KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data? Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��� Size: 1024B - Virtual size: 791B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ