Static task
static1
Behavioral task
behavioral1
Sample
01c2c7be1e32993e65b0161d643a2ccc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01c2c7be1e32993e65b0161d643a2ccc.exe
Resource
win10v2004-20231215-en
General
-
Target
01c2c7be1e32993e65b0161d643a2ccc.exe
-
Size
2.3MB
-
MD5
01c2c7be1e32993e65b0161d643a2ccc
-
SHA1
b39a64e95ca5314075e5440dd34ebc6c7478539b
-
SHA256
51e75bf38a5e1d71f98d0dcd1815d899e294cc15c090cd009422d16f1920b8c2
-
SHA512
7b93b1c6446b0e2162e60c8eb52cfd69adfd8417f256c6a67584c57782589c4e485569a242245d6a731a6cb00047476e4819f09ad09191702d3d1f74f3373222
-
SSDEEP
49152:+l/zLMo8QlOnj7bZhScrwCO1BUTgDAbhWnD+++Np5/DXc:+l7LIVnj/nScrwX12TSAbhWD+++Np5/o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01c2c7be1e32993e65b0161d643a2ccc.exe
Files
-
01c2c7be1e32993e65b0161d643a2ccc.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 672KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE