Static task
static1
Behavioral task
behavioral1
Sample
0c4b4fb9c424a158939d4cfa492e16226edfaea1dfe6b5c242b833c4dcb9ea5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c4b4fb9c424a158939d4cfa492e16226edfaea1dfe6b5c242b833c4dcb9ea5d.exe
Resource
win10v2004-20231215-en
General
-
Target
0c4b4fb9c424a158939d4cfa492e16226edfaea1dfe6b5c242b833c4dcb9ea5d
-
Size
3.2MB
-
MD5
23c3e2111be79604c718b474500213b8
-
SHA1
b2404b679b3a1b6acd71fdbf30ceb3922484f363
-
SHA256
0c4b4fb9c424a158939d4cfa492e16226edfaea1dfe6b5c242b833c4dcb9ea5d
-
SHA512
80848de2c7742c9611b1c1c748f74967ddf5411756c33a9368e6b1c309260a3eb0e6191429efbaa81fc1e81fa8065fb7f69ac4aa38407821b93f4c93163e6356
-
SSDEEP
49152:ixksKVwAP6eEOT0ktKjIJQhRDw70fl+ekkPe6pgUsqvVwP:xj6WTqjIJQh2EsK/nVwP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4b4fb9c424a158939d4cfa492e16226edfaea1dfe6b5c242b833c4dcb9ea5d
Files
-
0c4b4fb9c424a158939d4cfa492e16226edfaea1dfe6b5c242b833c4dcb9ea5d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ