Static task
static1
Behavioral task
behavioral1
Sample
0c81ed644b90313a46b8c280cabe032a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c81ed644b90313a46b8c280cabe032a.exe
Resource
win10v2004-20231215-en
General
-
Target
0c81ed644b90313a46b8c280cabe032a
-
Size
132KB
-
MD5
0c81ed644b90313a46b8c280cabe032a
-
SHA1
df95e080dac295af022417008e2354905b9e2b39
-
SHA256
de9558b3330f70226157b8edff72c9142b1633fa645c082632c8090316aef5e2
-
SHA512
5c0c85c012c5a5989c3aab6be3ffc1179eb52337dbd48b7a9107794cb777f72d365580bc72fed2acc570851cca818e7e789820a20ae3d36460118603e697564a
-
SSDEEP
1536:Xmf7uYu5QrZhrDNK1Njr3JpyJdbe2Jeij7RM6n+8yELzSd6ltCWxySLd82E0X:XmTumrZhanwe2Jeijl+9Jd6l1Bd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c81ed644b90313a46b8c280cabe032a
Files
-
0c81ed644b90313a46b8c280cabe032a.exe windows:4 windows x86 arch:x86
391b9e0190049cf5b3a2d91af5bade69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
ReadFileScatter
CancelTimerQueueTimer
FileTimeToLocalFileTime
DeleteCriticalSection
LockFileEx
GetFullPathNameA
GenerateConsoleCtrlEvent
GetConsoleAliasA
ReleaseMutex
CreateThread
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ