E:\work\syc\payload\shellcode\Debug\shellcode.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ca0d9f25c724bfe0285dbad9f72f623b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ca0d9f25c724bfe0285dbad9f72f623b.exe
Resource
win10v2004-20240226-en
General
-
Target
ca0d9f25c724bfe0285dbad9f72f623b
-
Size
329KB
-
MD5
ca0d9f25c724bfe0285dbad9f72f623b
-
SHA1
3c51769cf876d876791269024046063ed11f6305
-
SHA256
9844226c7f0512bce94d2ece925cb814001b498e8ca663e2bb9719207335b360
-
SHA512
bb45a11c85ec076f9b4c418dace18e5288ced72e493083f7d32a4711161b847c2b7e811b82398a81dd2868f12666fba7c48bec65997460d0621a4167f9bf1691
-
SSDEEP
24:ev1GSdilO4io2uKE/W55g7RQRN6DnzLwl3Sazby8PnRuV4MPgic:qrq2uKz5g7RGWzL8CazbDRuqS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca0d9f25c724bfe0285dbad9f72f623b
Files
-
ca0d9f25c724bfe0285dbad9f72f623b.exe windows:6 windows x86 arch:x86
4bcdf327877d9e28f023c51f8708f202
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
Sections
.text Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 695B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 194B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ