Static task
static1
Behavioral task
behavioral1
Sample
c1d31cc98190ef389d15c8970f42c8cf0483e9c2b1efcd6763dbe75182339042.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
c1d31cc98190ef389d15c8970f42c8cf0483e9c2b1efcd6763dbe75182339042.exe
Resource
win10v2004-20231023-en
General
-
Target
c1d31cc98190ef389d15c8970f42c8cf0483e9c2b1efcd6763dbe75182339042
-
Size
685KB
-
MD5
9cfa414e4cf61ad4f264ab1c50dac32f
-
SHA1
0bbebd3797df2fce64b5b71d537b9cdff6822e19
-
SHA256
c1d31cc98190ef389d15c8970f42c8cf0483e9c2b1efcd6763dbe75182339042
-
SHA512
7356df7655ebc613a210a29891034d912f15cc00d2e6458c3513e4a2b628cca992c0009d928aa8b3665306001fae8169823b60c181e84f36a94f515932f5d351
-
SSDEEP
12288:Ih1sTPX0/Foo+0QXdGFgTaON4MFVxj9sz5UYmoDAdZG:IvgPXu1+ZdCW2G+zeoMP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d31cc98190ef389d15c8970f42c8cf0483e9c2b1efcd6763dbe75182339042
Files
-
c1d31cc98190ef389d15c8970f42c8cf0483e9c2b1efcd6763dbe75182339042.exe windows:5 windows x86
4c40d9e72380c9c529f2414dbd5baedf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32FirstW
lstrcmpA
DosDateTimeToFileTime
VirtualLock
FindNextFileA
TerminateProcess
EnterCriticalSection
Process32Next
LoadLibraryA
FreeLibrary
CompareStringA
InterlockedExchange
GetModuleHandleA
SetLastError
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetCommandLineA
GetLastError
GetCurrentThread
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
LeaveCriticalSection
FatalAppExitA
HeapFree
GetACP
GetOEMCP
IsDebuggerPresent
SetConsoleCtrlHandler
RtlUnwind
HeapAlloc
HeapReAlloc
HeapSize
IsValidLocale
GetUserDefaultLCID
CloseHandle
user32
SetScrollRange
GetClassLongA
ChangeClipboardChain
GetProcessDefaultLayout
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 518KB - Virtual size: 518KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ