Static task
static1
Behavioral task
behavioral1
Sample
0ca39d733c899a848b3d4b413281a649.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ca39d733c899a848b3d4b413281a649.exe
Resource
win10v2004-20231222-en
General
-
Target
0ca39d733c899a848b3d4b413281a649
-
Size
24.6MB
-
MD5
0ca39d733c899a848b3d4b413281a649
-
SHA1
baf9a683c37698dd1fe486b95c1d75d2af747541
-
SHA256
a09b176171fa460dd7df22d0e8e2ccae708a116d7dfc6d29028ac4b3080e3fa1
-
SHA512
cdfc4207212bf56544d32e89c300627248bbcc8a8901fe6e009b4d8387a4981dc9c433cc208cce5e33eb16ce497a97e7caeca0e787d118a5583e8b9d51bafd54
-
SSDEEP
49152:wUJuxtxujXab/BXgWb2n8yIyiVPh74Gzqmf6aGgKqXvi6KydunmWjMIbSohJ5ZCL:wUJuxtxCaNQXrwVegXwfk4pCL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ca39d733c899a848b3d4b413281a649
Files
-
0ca39d733c899a848b3d4b413281a649.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE