Static task
static1
Behavioral task
behavioral1
Sample
0cdb8daf31bb172eef1ae60acbc9e176.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cdb8daf31bb172eef1ae60acbc9e176.exe
Resource
win10v2004-20231222-en
General
-
Target
0cdb8daf31bb172eef1ae60acbc9e176
-
Size
1.6MB
-
MD5
0cdb8daf31bb172eef1ae60acbc9e176
-
SHA1
d407c1a38b36ca13fab1121fc6dd07a9c1af31c8
-
SHA256
6084b52c287ad7028eb22784b003f6e79be9f12ce17ce171dae636f4f8b2d3ba
-
SHA512
389b0c9722978d2ac6cea0fef3aed4a5ed39d607f701ee1e2eef86c4aa575dcba0aa975352b3e20e2fbba4ee3fe82fbc1fe31faa4bbde9390dc1163d086f3899
-
SSDEEP
49152:AYGA0c4xLbpa6VFkl6YAFXPXTpHEsUum26tMc:AYG64dbpV/+GFE12O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cdb8daf31bb172eef1ae60acbc9e176
Files
-
0cdb8daf31bb172eef1ae60acbc9e176.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ