Static task
static1
Behavioral task
behavioral1
Sample
cc46d193feec02952a1efd5972ac7c2a0bb99eeb9349a96edc552dfee2734b3d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cc46d193feec02952a1efd5972ac7c2a0bb99eeb9349a96edc552dfee2734b3d.exe
Resource
win10v2004-20230220-en
General
-
Target
cc46d193feec02952a1efd5972ac7c2a0bb99eeb9349a96edc552dfee2734b3d
-
Size
24KB
-
MD5
8cbfd854c5c4d73057abc40045aa0f0c
-
SHA1
483a72ccb39373dfcd2164264a4d2d8a79d88d48
-
SHA256
cc46d193feec02952a1efd5972ac7c2a0bb99eeb9349a96edc552dfee2734b3d
-
SHA512
1550ea5f6252026cd9092feed6852d71b227168c1cbf44a3e52cac51b39f93ff7f5d66cee46a479f3f066c731ce3d51060bbfe42d8a633eb6ab49b081bc46c97
-
SSDEEP
192:LKCWt3FlbYzr4upca3faPuhLzfWBLN0VDf61oynhtKks2S7MN99IbhpaZOO:LKB1l8zcuryWdyBkf61Lo+w9paZ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc46d193feec02952a1efd5972ac7c2a0bb99eeb9349a96edc552dfee2734b3d
Files
-
cc46d193feec02952a1efd5972ac7c2a0bb99eeb9349a96edc552dfee2734b3d.exe windows x86
2965ac462c8c86fb5e37f1ff3c2b0617
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord540
ord924
ord2915
ord5572
ord825
ord5683
ord537
ord535
ord2764
ord4129
ord858
ord800
ord5710
ord823
ord926
msvcrt
_except_handler3
_controlfp
__set_app_type
_onexit
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
strncpy
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
sprintf
__dllonexit
atoi
_CxxThrowException
_access
kernel32
GetModuleFileNameA
OpenProcess
CreateThread
GetModuleHandleA
GetStartupInfoA
GetProcAddress
Sleep
OutputDebugStringA
FreeLibrary
LoadLibraryA
WaitForSingleObject
user32
RegisterClassExA
LoadCursorA
LoadIconA
CreateWindowExA
DefWindowProcA
DestroyWindow
PostQuitMessage
EndPaint
BeginPaint
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
TranslateAcceleratorA
msvcp60
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0logic_error@std@@QAE@ABV01@@Z
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ