Static task
static1
Behavioral task
behavioral1
Sample
ccf158bf3b3bf7ff98dc2c9298a98c16.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccf158bf3b3bf7ff98dc2c9298a98c16.exe
Resource
win10v2004-20231215-en
General
-
Target
ccf158bf3b3bf7ff98dc2c9298a98c16
-
Size
89KB
-
MD5
ccf158bf3b3bf7ff98dc2c9298a98c16
-
SHA1
d16abc9267158da2ef558549af6dcfdf0e5c0cef
-
SHA256
0716bb226589f1526f3ca39bf250942486739029dac3ed7a30c9fd639ee71f2b
-
SHA512
6f20d93df07939820b58993bccb28115a0b2b0694f4a35d24481294ce7b022731384dc6f5cbcecb3d12771491fac71b8a5067a6c613e77b32207e7806f9cdd3f
-
SSDEEP
768:zGLMNfm+ei+F5tFazz1e7Nv62n3gYRN+nKk0YoQ34wnjPWvbsN63j1fbYARN:uOfmpmg7NeYRN8Kk0Llzsox1P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccf158bf3b3bf7ff98dc2c9298a98c16
Files
-
ccf158bf3b3bf7ff98dc2c9298a98c16.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 390B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE