Static task
static1
Behavioral task
behavioral1
Sample
0cbce195d61fc18b120c7da3bd4ebc41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cbce195d61fc18b120c7da3bd4ebc41.exe
Resource
win10v2004-20231215-en
General
-
Target
0cbce195d61fc18b120c7da3bd4ebc41
-
Size
148KB
-
MD5
0cbce195d61fc18b120c7da3bd4ebc41
-
SHA1
00d7a0b3d38c70c1f14556c30be0e92f4447d9fb
-
SHA256
2ae504d0af0a704137b45ca565ea5f9f13f2c87e6a8b091ee9abe9b4b8f7e4e1
-
SHA512
b951f269db5729bf598c7bc492a061109cc1889d5fc97e10e41f2e57c5fe4de9c5e800acb20b3f2bc31f5376c7312e50246722c321ac0eca9d2b39b0661829b0
-
SSDEEP
3072:/mirz3R1ie2b5fDxFhMOy9craBcbkVmcuXfP8axtxAZShHCEWyHkg0xynsRkzJiR:bDahMOy9craB2ariH8axtxAZShHCEWyI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cbce195d61fc18b120c7da3bd4ebc41
Files
-
0cbce195d61fc18b120c7da3bd4ebc41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 34KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CODE Size: 8KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txdata Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE