Static task
static1
Behavioral task
behavioral1
Sample
0cb1acd3bcf28a685a13283671da832f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cb1acd3bcf28a685a13283671da832f.exe
Resource
win10v2004-20231222-en
General
-
Target
0cb1acd3bcf28a685a13283671da832f
-
Size
129KB
-
MD5
0cb1acd3bcf28a685a13283671da832f
-
SHA1
660b4fbf94165bf7aa104940b317d34124152776
-
SHA256
f3e665ce95c5c9d73bd627f05e1148c1fd842fab5e4caa62aa43260245eaafc9
-
SHA512
8f33eb8b2e46aff7188d2864d7642f2f9e995b40b1bcc1851286640d3e9eedbc9e666986efa8cf69a5aa7dc064e40aac68ce902ecefaa30ca0fcf87a30909a30
-
SSDEEP
3072:iQCw8m+Onc8Jkpf073/LLp7fzFE5k4E1fo6/DuqfM5Jqk8NYiuXV7Pa4c89:iNRIJJJRfzFykbHD/E5Jqk8NYfE4J9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cb1acd3bcf28a685a13283671da832f
Files
-
0cb1acd3bcf28a685a13283671da832f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE