Static task
static1
Behavioral task
behavioral1
Sample
0dcfcc13138001f875c99089ce4e6311.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dcfcc13138001f875c99089ce4e6311.exe
Resource
win10v2004-20231215-en
General
-
Target
0dcfcc13138001f875c99089ce4e6311
-
Size
11KB
-
MD5
0dcfcc13138001f875c99089ce4e6311
-
SHA1
cb0c7240422e13eb1823bb92a7208a8dd5f24d4c
-
SHA256
eb0df1bb5730a75830e12cd427d6c499c99981eccac6300669e96689d6a033db
-
SHA512
20276602982d203d46f366bf94c69730ba97a5ca181862b0096fbb8f2df62f6f77c26cc762bddd55b24142312bdb41043e4d6e9c4ffcdf4d98e1115ad32134ed
-
SSDEEP
192:kGMpVX5EL6xRDymm4yeHTrBbgig0zpzb0XH1zRCZEHHO64hit1EI35Efrl5:kGMfYwJTm4XzCV0Fzb0XhS8O6+iTE4a7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dcfcc13138001f875c99089ce4e6311
Files
-
0dcfcc13138001f875c99089ce4e6311.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WIN0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE