Static task
static1
Behavioral task
behavioral1
Sample
0c81fbf1d9dba13b99bb17486d9188c9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c81fbf1d9dba13b99bb17486d9188c9.exe
Resource
win10v2004-20231222-en
General
-
Target
0c81fbf1d9dba13b99bb17486d9188c9
-
Size
123KB
-
MD5
0c81fbf1d9dba13b99bb17486d9188c9
-
SHA1
8abea172ad016494f60e05fdc48adaf466520b22
-
SHA256
ba76f710256e716afc929c3bdb9629d90939a1156258c48f5cb85359b6cba274
-
SHA512
d7f8775811db4346a1283acbb2fd20d6052ff43e121dba496e3ce3e40032c70e9f8ababc24f2f1e1c2b4d873a3cc1685108c6213232436c8592535c02a847ccc
-
SSDEEP
3072:mmJVW89Y4gjbE4189UmLmI5pKYRaZOYPOq5fElj5RyC:LV/ibP897N5TRaZOi5fIdX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c81fbf1d9dba13b99bb17486d9188c9
Files
-
0c81fbf1d9dba13b99bb17486d9188c9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE