Static task
static1
Behavioral task
behavioral1
Sample
0c48f247edc937bfb137236808d67e5b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c48f247edc937bfb137236808d67e5b.exe
Resource
win10v2004-20231215-en
General
-
Target
0c48f247edc937bfb137236808d67e5b
-
Size
127KB
-
MD5
0c48f247edc937bfb137236808d67e5b
-
SHA1
f7e898178a394f73fe914eb1e8d61784ac8ebeaa
-
SHA256
66fbaa0f6cb9e6da20869bf2355ef836933ae2db3d538409b09c7a7efc8a5380
-
SHA512
917af3e2e34e6f4253c6474fbcbcb452939ae96b5d41888a5db3a472fe3055a0b9ae0430897a40c82815ec1d675527286c7d2e75c907d19cef231a3b6bb29137
-
SSDEEP
3072:CZSWmqrWi0erCIVq4xeROw0dHgC/xSazQ7L7uHd3/SCSRCTACW:3WnJCIJAROwuAdv7L9CECW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c48f247edc937bfb137236808d67e5b
Files
-
0c48f247edc937bfb137236808d67e5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
d Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pi8 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
py Size: 4KB - Virtual size: 1014B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE