Static task
static1
Behavioral task
behavioral1
Sample
0cc2b4be6c60e0e37012981cf4ac4693.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cc2b4be6c60e0e37012981cf4ac4693.exe
Resource
win10v2004-20231215-en
General
-
Target
0cc2b4be6c60e0e37012981cf4ac4693
-
Size
1002KB
-
MD5
0cc2b4be6c60e0e37012981cf4ac4693
-
SHA1
73081a9a9b42cfb7af542c30adb02e4d2940650e
-
SHA256
dbcb902b6d7b50c1fde9d49c6c34e2cd7bc01063517c2439f523e8e9ceae4598
-
SHA512
b6b49871ca672dcb4cadd983d80fc7751a94ac0c268575e32d1cd27415517af513e9c138a674dfce9a0d9a266a2891e1c65a7a4159b91e06bf543f96fe8cd036
-
SSDEEP
12288:TJASvK0mQR+rYTZwYmoCaCvqhri1ch9mVQj4/ozhyCr3TfI/kBuJIPXTaME/i9jt:i3l3YRCaDG1cm43Tfik0JIfWM7huS1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc2b4be6c60e0e37012981cf4ac4693
Files
-
0cc2b4be6c60e0e37012981cf4ac4693.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 317KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.237895 Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE