Static task
static1
Behavioral task
behavioral1
Sample
0ccf2d1ef66fa2af716feb358fe2fff14cf24235892c23f8d92857eed695babd.exe
Resource
win10v2004-20240802-en
General
-
Target
0ccf2d1ef66fa2af716feb358fe2fff14cf24235892c23f8d92857eed695babd
-
Size
1.8MB
-
MD5
0169ee4d4e6b3186975108ef0dca0ea7
-
SHA1
1346be6f0a2de26b0eea593a734f406b7d21e7ca
-
SHA256
0ccf2d1ef66fa2af716feb358fe2fff14cf24235892c23f8d92857eed695babd
-
SHA512
7f8e9e2c14cf6dee704b87c8b6b97d795bf630449bb819fe5ba03fb5dc6ec58ebfa6629568d9d947778c15626f052137cc4eeffceb459aa73a7347c1ee552fc6
-
SSDEEP
49152:A83/W2BHKl6IX2nekyKE/ZOP0ZALdtLtwuR:B3emnHwOsALPtwuR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ccf2d1ef66fa2af716feb358fe2fff14cf24235892c23f8d92857eed695babd
Files
-
0ccf2d1ef66fa2af716feb358fe2fff14cf24235892c23f8d92857eed695babd.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qputlzsh Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vdipdmni Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE