Static task
static1
Behavioral task
behavioral1
Sample
0cd3955dba180d9581bbe3e2be479ff200b0b73ebac413ab8c37e836793c25e5.exe
Resource
win7-20240221-en
General
-
Target
0cd3955dba180d9581bbe3e2be479ff200b0b73ebac413ab8c37e836793c25e5
-
Size
66KB
-
MD5
178154710e94a521d1ec62633087fd50
-
SHA1
5fa0a95051d6f028e7275060eacd918d7ec952c1
-
SHA256
0cd3955dba180d9581bbe3e2be479ff200b0b73ebac413ab8c37e836793c25e5
-
SHA512
d653e5af210d39b2b1d59cf98219e8771a882aa6c9192d93e0efd38be02b60900e85d6937f0eee2079e3cf13cf8eaecedbe3df30801c7e0afb0227b81aaa8001
-
SSDEEP
1536:/qbSe+Zk78NR3dN5nP6iS4qz0XSW3iDhy3:/3e+a+3dN5bS4qz3DhO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0cd3955dba180d9581bbe3e2be479ff200b0b73ebac413ab8c37e836793c25e5
Files
-
0cd3955dba180d9581bbe3e2be479ff200b0b73ebac413ab8c37e836793c25e5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE