ocnN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b9ed438f763584171822b73a28273427a0923cca26b8e40b008e3aefbcf48d79.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b9ed438f763584171822b73a28273427a0923cca26b8e40b008e3aefbcf48d79.exe
Resource
win10v2004-20231215-en
General
-
Target
b9ed438f763584171822b73a28273427a0923cca26b8e40b008e3aefbcf48d79.exe
-
Size
790KB
-
MD5
4139eb079206e8a99e5a801a5f2c74d0
-
SHA1
62baf3ff2623429dd7c3a9e2c011e8419482b833
-
SHA256
b9ed438f763584171822b73a28273427a0923cca26b8e40b008e3aefbcf48d79
-
SHA512
f395f99bcd7ed5afa486c4587d2ceeb821a68cbae00af0b4e9f7a5211cd5d53038f26008a6af88fdce1cf9137187ea210c1a85f061ddd1f532978d9576bdb674
-
SSDEEP
24576:SpNlCZoi0e8UZDdEVjZ7OifqWC+cn4Mfo68bsh:Sf+oirDMXHC+Q40ab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9ed438f763584171822b73a28273427a0923cca26b8e40b008e3aefbcf48d79.exe
Files
-
b9ed438f763584171822b73a28273427a0923cca26b8e40b008e3aefbcf48d79.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 787KB - Virtual size: 787KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ