Static task
static1
Behavioral task
behavioral1
Sample
0c0de283d3c6871b2ec8c9f511017f301294885e33841ff6fe753f47511417d3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c0de283d3c6871b2ec8c9f511017f301294885e33841ff6fe753f47511417d3.exe
Resource
win10v2004-20250217-en
General
-
Target
0c0de283d3c6871b2ec8c9f511017f301294885e33841ff6fe753f47511417d3
-
Size
1.7MB
-
MD5
8b6980e83eb616053aeff6fe2a3c6224
-
SHA1
f0090a30e164da4ccad453e40980ec639ae0f1da
-
SHA256
0c0de283d3c6871b2ec8c9f511017f301294885e33841ff6fe753f47511417d3
-
SHA512
afe8d516df200461804d8333e0c29e2cac5628b095f3f3c264820e8990f25be067885c4aefaba8a7b84dfa92f1c7802b3cc05528c7e3b4e4402555299676d02f
-
SSDEEP
49152:RVKm80LEVntwx9Ddb5CMZJ0w8NwXwI/fcuD/:3hEzi95lCMZ/9cg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c0de283d3c6871b2ec8c9f511017f301294885e33841ff6fe753f47511417d3
Files
-
0c0de283d3c6871b2ec8c9f511017f301294885e33841ff6fe753f47511417d3.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wvrkuzyq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
intwwjfj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE