Static task
static1
Behavioral task
behavioral1
Sample
0cc44263aeb971e156edc5d4dea2873a89399f577945ee14da34a969da0c6c42.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cc44263aeb971e156edc5d4dea2873a89399f577945ee14da34a969da0c6c42.exe
Resource
win10v2004-20240802-en
General
-
Target
0cc44263aeb971e156edc5d4dea2873a89399f577945ee14da34a969da0c6c42
-
Size
1.7MB
-
MD5
71714802f09b5fba98aeed4e07da69e3
-
SHA1
0c0b55d18cbfb5dcd983851e8bd1e65579a0aa25
-
SHA256
0cc44263aeb971e156edc5d4dea2873a89399f577945ee14da34a969da0c6c42
-
SHA512
5b984a034b3a073e79e2559a5e4d757712a9e685670e771ff2ab66feba701c50913f9f140179cb69af892e8c5752243bfd16be380cbd2acc78b7b759187b6424
-
SSDEEP
24576:aJbBVxxZTrs2Wx5qjRE70Vv07bfV76F3dZDa3Cb2byC39bnakLwyh6:Ip82agRccF3dtaSCrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc44263aeb971e156edc5d4dea2873a89399f577945ee14da34a969da0c6c42
Files
-
0cc44263aeb971e156edc5d4dea2873a89399f577945ee14da34a969da0c6c42.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 141KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 948KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 128KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ