Static task
static1
Behavioral task
behavioral1
Sample
c0baf3e6284d7111c24510e765729abf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0baf3e6284d7111c24510e765729abf.exe
Resource
win10v2004-20240226-en
General
-
Target
c0baf3e6284d7111c24510e765729abf
-
Size
684KB
-
MD5
c0baf3e6284d7111c24510e765729abf
-
SHA1
8b55abaaec8b291c3292eb4dc2c83cc368f27208
-
SHA256
2c3cb386ad231090ffa39ac61ee58aec3fec2b84cf5dc8452e127c0cb07d0b67
-
SHA512
bdf60dff22fd80c8ce5606864693edb2efeef736767bb762f0ebd4ac5d4753b8390b6c51900837ff6791b5d0fc2938b7b85ab51736f46017a345023ff901eb8d
-
SSDEEP
1536:399VvzX82ITluw28lsa7v25Vfs02ETY2NkYVFsd4UB1XlLyE5xNFvtO3lgLmq/c:t9xb1+v25XTluusnpn5vFvglgS5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0baf3e6284d7111c24510e765729abf
Files
-
c0baf3e6284d7111c24510e765729abf.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ