Static task
static1
Behavioral task
behavioral1
Sample
0cd3c79a0679c4f51b4f83987a49720e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cd3c79a0679c4f51b4f83987a49720e.exe
Resource
win10v2004-20231215-en
General
-
Target
0cd3c79a0679c4f51b4f83987a49720e
-
Size
167KB
-
MD5
0cd3c79a0679c4f51b4f83987a49720e
-
SHA1
c8a37b6926edaba43da270fee27aae84f7e620f7
-
SHA256
ee9abcb6b8a6e69bef26ae81fa37f84df8dcf11b10646e1d8a7170c80a3041a9
-
SHA512
51cac6858a669ed04398e8d9f0f9e69b15cf362c5fb489b6333ab961cc2cd8c1d993250b01802b153c3703198ede79add111670b720ae4d6cc3c7cbec633b573
-
SSDEEP
3072:Jtj8GsCCdDatoaBGzxRUkRad/wTUnUaMMXVoiqwJj51gr8X0cJLmXMX:JtjIFaBG9RUkRaNwTUnDMMXOSfW8XtaY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd3c79a0679c4f51b4f83987a49720e
Files
-
0cd3c79a0679c4f51b4f83987a49720e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 496B - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: 166KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE