Static task
static1
Behavioral task
behavioral1
Sample
0c56e569d0e2b26e19c36f078d8ebd9aadf037d9361f7b94e109403e9fce39b2.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c56e569d0e2b26e19c36f078d8ebd9aadf037d9361f7b94e109403e9fce39b2.exe
Resource
win10v2004-20240426-en
General
-
Target
0c56e569d0e2b26e19c36f078d8ebd9aadf037d9361f7b94e109403e9fce39b2.exe
-
Size
574KB
-
MD5
1ca305cea098c4e0f6036176920002c0
-
SHA1
0f2731859a269ba08b503c9accfd85ca3fd37fe0
-
SHA256
0c56e569d0e2b26e19c36f078d8ebd9aadf037d9361f7b94e109403e9fce39b2
-
SHA512
bf51ee0a78a7e5e3385c5711a90c39ddd4c9b307b601fecb3cf216adffbe137ac1b8586c04a776d3f89d54615a752a9e9bd1ced2f61adc7df2b11715815b38c1
-
SSDEEP
3072:EtwizQTj8CSUYf8W3nSjen++Bj88OZS0/Qe2HdOLlqw1aQuoYKN6LSSe9oE:Euj8NDF3OR9/Qe2HdklruoYk6LRe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c56e569d0e2b26e19c36f078d8ebd9aadf037d9361f7b94e109403e9fce39b2.exe
Files
-
0c56e569d0e2b26e19c36f078d8ebd9aadf037d9361f7b94e109403e9fce39b2.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE