Static task
static1
Behavioral task
behavioral1
Sample
0cccd623d2d9b79286d300d10b613c78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cccd623d2d9b79286d300d10b613c78.exe
Resource
win10v2004-20231215-en
General
-
Target
0cccd623d2d9b79286d300d10b613c78
-
Size
16KB
-
MD5
0cccd623d2d9b79286d300d10b613c78
-
SHA1
c3cb52db49a4845cb99b2a559e0a301b34967731
-
SHA256
d3a1c00d7efc3f349d25a406ff8be368a53863316010844b5fc60dea75069fbe
-
SHA512
555e0725ae884cc5de650d67e5d9f5acf6cc8e9687d5f7f77d5c252b89d7eee2049d6722796220b4aadb20daa45e277fc1d019648edcf5228a6f3a9b32a0d0d5
-
SSDEEP
384:miKSegiv73SgZN3lCrQbnR04pidpthnQn9un:mimT2rQNpidHhQ9u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cccd623d2d9b79286d300d10b613c78
Files
-
0cccd623d2d9b79286d300d10b613c78.exe windows:4 windows x86 arch:x86
8456c1a91f2276de9af4257da3f240c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
VirtualAlloc
GetProcAddress
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ