Static task
static1
Behavioral task
behavioral1
Sample
c0bb64fc0c9ea441cec9257e94ed6051.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0bb64fc0c9ea441cec9257e94ed6051.exe
Resource
win10v2004-20240226-en
General
-
Target
c0bb64fc0c9ea441cec9257e94ed6051
-
Size
56KB
-
MD5
c0bb64fc0c9ea441cec9257e94ed6051
-
SHA1
4c7ab7e2f615bd8c293e9db7a3ed67a427505d29
-
SHA256
f120f3f090543c41e9ef3e6c2ea1c82c2d495e1916579df35c6f7cc73897bc16
-
SHA512
069b94b011797aa03e4175ac57fb6cf4ff9682a3080bb7d0c82ad154ca7d2d3aded96a1c928e0e40be25c7e94b7603ed64c415a98f07ef53bf4d00d989c305a9
-
SSDEEP
1536:31f8JtbypKpDcVGn9CzDlOconFkpz0bO8Lsd:31EPyoCC9CNW+Qy8Lsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0bb64fc0c9ea441cec9257e94ed6051
Files
-
c0bb64fc0c9ea441cec9257e94ed6051.exe windows:4 windows x86 arch:x86
b377f83ce92e6467cb07b01f928ee639
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
SetLocalPrimaryComputerNameA
GetSystemTime
SetProcessShutdownParameters
VirtualProtect
FindNextVolumeA
GetSystemTimeAsFileTime
ReplaceFile
WriteConsoleW
GetSystemPowerStatus
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE