Static task
static1
Behavioral task
behavioral1
Sample
0cab38e80458434839334eaa5f1d4dfc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cab38e80458434839334eaa5f1d4dfc.exe
Resource
win10v2004-20231222-en
General
-
Target
0cab38e80458434839334eaa5f1d4dfc
-
Size
43KB
-
MD5
0cab38e80458434839334eaa5f1d4dfc
-
SHA1
2993d1fcff788355f55661516d968415963962cf
-
SHA256
1f4fc3fb1884efe5e6f2600a12a80bf5175f5c4a4c29b9a855100245ac374d2b
-
SHA512
4010a50da5007ec58d83d4158b74e21b969f8595e58d1189e09f833011a1db6ed340a2d1c9b0c94e9eab6bc5b424c1208f1ef5b8daf6ab2564ed14fec520d4cb
-
SSDEEP
768:lpXFr2nXZr5vyY9qk3tNILlrGTVeFUxADgiqPB/xLe4VBR1J2mngZciEcd:5anFhyhY3+lrOeFUyJqPB/52LciEm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cab38e80458434839334eaa5f1d4dfc
Files
-
0cab38e80458434839334eaa5f1d4dfc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zZNuWkkp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE