Static task
static1
Behavioral task
behavioral1
Sample
cca9279ff296d6053abf925abe8c016c80e250f7982426569a42440b03d27a08.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
cca9279ff296d6053abf925abe8c016c80e250f7982426569a42440b03d27a08.exe
Resource
win10v2004-20230703-en
General
-
Target
cca9279ff296d6053abf925abe8c016c80e250f7982426569a42440b03d27a08
-
Size
15.4MB
-
MD5
a0cd880175c6c1e59cd930ac351b754e
-
SHA1
7652a4ce1b6285292c38d3799727122b621cd56f
-
SHA256
cca9279ff296d6053abf925abe8c016c80e250f7982426569a42440b03d27a08
-
SHA512
64c00c5ecdde21ea1a9d778a36507db6048c8c4f755147dc56811be05c7773f1c03151e7cc2dfc565a2fe7750f1554b964d673c7ede25acf49aa661d8189fc3d
-
SSDEEP
393216:1PdsZ2+f6pcjj0p9VDFwhfXoaDxVK1ERmfZv2wQ5:tbxWg9V2oaD61EReZv2wI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cca9279ff296d6053abf925abe8c016c80e250f7982426569a42440b03d27a08
Files
-
cca9279ff296d6053abf925abe8c016c80e250f7982426569a42440b03d27a08.exe windows x86
8386773ffe7d75ce9bcae215d2faf885
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutReset
ws2_32
accept
kernel32
GetTimeZoneInformation
user32
ScrollWindowEx
gdi32
DeleteDC
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetElement
comctl32
ord17
Sections
.text Size: - Virtual size: 967KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 2.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 10.9MB - Virtual size: 10.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE