Static task
static1
Behavioral task
behavioral1
Sample
0cf42bae0ad80235367b0f9ee47c2ed5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cf42bae0ad80235367b0f9ee47c2ed5.exe
Resource
win10v2004-20231215-en
General
-
Target
0cf42bae0ad80235367b0f9ee47c2ed5
-
Size
800KB
-
MD5
0cf42bae0ad80235367b0f9ee47c2ed5
-
SHA1
15287d3d53ea536f523d7218d5b8cade3f2181ed
-
SHA256
dc215cb87bd3d448b8e62da4f470913c247e096fd8ba24590031caba3983d57a
-
SHA512
e0c4f8e2af93b274d970309fb796974295b5a7d7c1daf75bf41191168ed0bed2d225ff57825dcd4d40b1af43b5f9cae015e00387258b12479d43f8dcd35a6a14
-
SSDEEP
12288:NBlZGgssJ5M7XGPGExSJjbScklQMKgOnGWVh9KcVfxwY4jvRRGImmkOJ37kzMUJB:zyiMbGWJtO5UkcVfj6nn37kz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cf42bae0ad80235367b0f9ee47c2ed5
Files
-
0cf42bae0ad80235367b0f9ee47c2ed5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE