Static task
static1
Behavioral task
behavioral1
Sample
0e5c0caf4e87b88fe5d108c042ff93ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e5c0caf4e87b88fe5d108c042ff93ba.exe
Resource
win10v2004-20231215-en
General
-
Target
0e5c0caf4e87b88fe5d108c042ff93ba
-
Size
108KB
-
MD5
0e5c0caf4e87b88fe5d108c042ff93ba
-
SHA1
fc84b9548b21e1767ff64255fd8447b0cdcc6267
-
SHA256
a7e324c74d4df9d7e8bb1aca86e64643db14447abd746bfddb9274a679dd1bea
-
SHA512
cf9e6cc6023b1e1fba7143126450ed615a5bed803a6b15a6e1630deed97573b0dd005b20c329b6ed892e4d0bcf26765a644f50817b8a4aabd23f594c3d1efca2
-
SSDEEP
3072:yktG0avTIjHYuT6PLCG5rtPlwSf9ISRd2zkV:yJ0sc7L+DCIhPlwSKmd2wV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e5c0caf4e87b88fe5d108c042ff93ba
Files
-
0e5c0caf4e87b88fe5d108c042ff93ba.exe windows:4 windows x86 arch:x86
edd6a8881ef6950afa65d6451de7cedf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit
kernel32
GetModuleHandleA
GlobalReAlloc
lstrcatA
GetPrivateProfileStructA
QueryDosDeviceA
Heap32Next
FreeLibrary
GetStartupInfoA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ