Static task
static1
Behavioral task
behavioral1
Sample
0c8830b7936334f4c6004c9ba071fbfc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c8830b7936334f4c6004c9ba071fbfc.exe
Resource
win10v2004-20231215-en
General
-
Target
0c8830b7936334f4c6004c9ba071fbfc
-
Size
100KB
-
MD5
0c8830b7936334f4c6004c9ba071fbfc
-
SHA1
15a63b35138188e4a33dc0569f7d41591d8df4aa
-
SHA256
c50ec01919cac2463d4784dca41f8650a95576f5d75a90d902e6b0ab42970815
-
SHA512
b06521be92838020bc179226f66556af5c82370b785e6625ebcf7a2ba8328cf0b2add96ce23ca4bd55399e1f9e583f0e0332abce90f64146d9d6ba5ad718a44e
-
SSDEEP
1536:vVzozJUl0TQvyGHIHxHDyN8pk5BKt7i7glGzxn2wYJkMfCpAaEXLAc:dzGUGlWvvD2G+lfbAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c8830b7936334f4c6004c9ba071fbfc
Files
-
0c8830b7936334f4c6004c9ba071fbfc.exe windows:4 windows x86 arch:x86
55bc7868c8211784f576cd075343f020
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA
kernel32
LocalFree
HeapSummary
MulDiv
SetupComm
IsBadWritePtr
GetConsoleMode
user32
CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon
Sections
.text Size: 41KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE