E:\A\_work\421\s\bin\obj\Microsoft.VisualStudio.LiveShare.CPS.16.0\Release\Microsoft.VisualStudio.LiveShare.CPS.16.0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DCC_PO001070322.exe
Resource
win7-20240903-en
General
-
Target
4603e9b4de577e9a750d57694f79b502c0eacb9c154bc0a874a39056727a27e1
-
Size
513KB
-
MD5
be8561c2ed7de8e785d2c5b60eb3718e
-
SHA1
661759e1b4e61bfe2276b49a023fba1cb5de3b85
-
SHA256
4603e9b4de577e9a750d57694f79b502c0eacb9c154bc0a874a39056727a27e1
-
SHA512
f5bdf65b43ad9dc2f3c5febb86507be6112f3432c6425527b622aea98586b0e544ff1562dc3afe73c6ae09c28cdc5dbf195bf1ed722666311fb7fd544ce279b7
-
SSDEEP
12288:BhGJDGl8yGHUataSpCMIlkm3Pr5OPF6DxyuAo2TPiRJYNk5v2dOK:OC8LUkIMIxdO4DQux2TPWYS5edOK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/DCC_PO001070322.exe
Files
-
4603e9b4de577e9a750d57694f79b502c0eacb9c154bc0a874a39056727a27e1.zip
Password: infected
-
c0ca6d4d0b872149b4296807a3e960df2bef10a84f0f94a512ef3e43df5af48e.iso
-
out.iso.iso
-
DCC_PO001070322.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 762KB - Virtual size: 762KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ