Static task
static1
Behavioral task
behavioral1
Sample
0cc2f587dec522061d984365397cb340.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cc2f587dec522061d984365397cb340.exe
Resource
win10v2004-20231215-en
General
-
Target
0cc2f587dec522061d984365397cb340
-
Size
847KB
-
MD5
0cc2f587dec522061d984365397cb340
-
SHA1
93c34efeb9efcfa2bdfbb4a50c0ab4b74b954a52
-
SHA256
5b458abfe7cd84787df8a77659729f73c7617b1a54daea04229a24071d7f650d
-
SHA512
1c48fa6ccf5756aa5a46c8e4e9ee9c13af7ba70913fe06c2ae59e2ed07a960cef88112b4b9a41f9855cd5d4c4b2dfa199e522865f3e41cad3604bfa3eaeba886
-
SSDEEP
12288:0Zdo2MjXkEeQGGOgSlDD7GjStd6ZG8yE:lxjXkEeQ1OnD/GjStd6lR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0cc2f587dec522061d984365397cb340
Files
-
0cc2f587dec522061d984365397cb340.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 422KB - Virtual size: 421KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ