Static task
static1
Behavioral task
behavioral1
Sample
c0bc93334e0b3169896243d5b9a2c0bb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0bc93334e0b3169896243d5b9a2c0bb.exe
Resource
win10v2004-20240226-en
General
-
Target
c0bc93334e0b3169896243d5b9a2c0bb
-
Size
118KB
-
MD5
c0bc93334e0b3169896243d5b9a2c0bb
-
SHA1
3a1f372bfea6f0cef4d97901c18764a771430b60
-
SHA256
76ff3c4e7ac78517793b99c2d968a7cc37370fb390d49069bad94d85e1516836
-
SHA512
f06df38ab3f4c34a18ef0e1bd713204bec36c5b52aca37cb8dfe3f1d67f54b2758b8057a4b71064adc2ee990931ed6ce96ff4a3e5722961a2eebeff0c10d494b
-
SSDEEP
3072:pNTATQ6+VH42ccnb8DNzlWoDqrVTWPxYMZcQ:pNTATil42cI8ppWoDkVTWjZcQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0bc93334e0b3169896243d5b9a2c0bb
Files
-
c0bc93334e0b3169896243d5b9a2c0bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
jxtzfzf Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yq2yqrbl Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dv4g7e Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE