Static task
static1
Behavioral task
behavioral1
Sample
0c78803e6921e8dcf2f81e0d448d182d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c78803e6921e8dcf2f81e0d448d182d.exe
Resource
win10v2004-20231215-en
General
-
Target
0c78803e6921e8dcf2f81e0d448d182d
-
Size
276KB
-
MD5
0c78803e6921e8dcf2f81e0d448d182d
-
SHA1
ac8c76dce1f25e5f386568976ee8a7a1fd0da075
-
SHA256
9865cf02a4d93839c90cbec7bf7a3ad4f5edf15f553d12027c41b2936e41cfac
-
SHA512
b3ed1d4bdd0a2788d95bbf92cbaf8a7d00fd6268fdeb34c44472a6e3cd9f2163a88a45cd61288b7783c0d6dc9e1f200fbfff9a9911ca7d801114c071873b0c38
-
SSDEEP
6144:6C02d1vWlCmuSRBTcLoSZpLw1kBda0fPhnUzeZ2Di0ewjwMPHlKw:T02d1+lCwRGZy5iPh6ecDTeWzlK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c78803e6921e8dcf2f81e0d448d182d
Files
-
0c78803e6921e8dcf2f81e0d448d182d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 275KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE