Static task
static1
Behavioral task
behavioral1
Sample
c0a0f002941832caed5e187551e5dd50.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c0a0f002941832caed5e187551e5dd50.exe
Resource
win10v2004-20240226-en
General
-
Target
c0a0f002941832caed5e187551e5dd50
-
Size
48KB
-
MD5
c0a0f002941832caed5e187551e5dd50
-
SHA1
b956c661e06c3264ca5b2817f6f54a856ec0ac56
-
SHA256
98cff861e44f192a77490b56e0f87982f99e2db8bb1b3d1e3d040dee341405f4
-
SHA512
f32e4b078895cfaa60f141801d9191d919b30c6c80d34ad93ad99296d7acd23e074e7c8f9db9bdc73daa938ee9949366f544b01633617d0472a54c01fb0a0bf7
-
SSDEEP
768:4JHJHzlhtAGEJukfkHK1JfAfbWVq5AGsDz1URvAowPCfdZbcjrVGAFeo5e:qTl4GEIksqTY6LGQ44ow6l5cXQAd5e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0a0f002941832caed5e187551e5dd50
Files
-
c0a0f002941832caed5e187551e5dd50.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 10KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE