Static task
static1
Behavioral task
behavioral1
Sample
0ccd8e6f60b45af6ec51af87efeeff2b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ccd8e6f60b45af6ec51af87efeeff2b.exe
Resource
win10v2004-20231215-en
General
-
Target
0ccd8e6f60b45af6ec51af87efeeff2b
-
Size
10KB
-
MD5
0ccd8e6f60b45af6ec51af87efeeff2b
-
SHA1
68566cf96001df89c7fdce03b3e202b9e70eec4b
-
SHA256
70276ed5bde8bccaba242c3dd3a81b2088da5ad94012b64a05dc591f4526384d
-
SHA512
cd3aca1709affc62e57bd5da08f7620f345a196038f07483d005c6eb97de2d303d6f9a4e514cee7a0586efd60ddd41712aec33522cbcc88244447b0312e9ea32
-
SSDEEP
192:vbshltNmp+FwYyjcRciZ2ko3Vy/RN6h2vP0KXAjrXMsTOwCE5u5Vehp:Dgl6kFwYyjcRcuo3Rh2P0KX9sKrGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ccd8e6f60b45af6ec51af87efeeff2b
Files
-
0ccd8e6f60b45af6ec51af87efeeff2b.exe windows:1 windows x86 arch:x86
ad17a361c734ccc54c8056c57220fccc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawStateA
EndMenu
EndPaint
EnumDesktopsA
FillRect
GetCaretPos
kernel32
EnumResourceNamesA
FindAtomA
FindClose
FlushFileBuffers
FreeEnvironmentStringsA
FreeLibrary
urlmon
CoInternetParseUrl
DllUnregisterServer
FindMediaType
FindMimeFromData
GetClassURL
msvcrt
sqrt
_strrev
_strset
_tolower
_utime
_wcsicmp
_wctime
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE