Static task
static1
Behavioral task
behavioral1
Sample
cc4e00bf0b311fcd3ec7429a516ed90dde428e0949406f20974c1654098f008b.exe
Resource
win7-20231023-en
General
-
Target
cc4e00bf0b311fcd3ec7429a516ed90dde428e0949406f20974c1654098f008b
-
Size
3.4MB
-
MD5
9c7b8690930169999102aca498611e78
-
SHA1
921ec762b08269a627b8a94e91e9cc03fccf62d6
-
SHA256
cc4e00bf0b311fcd3ec7429a516ed90dde428e0949406f20974c1654098f008b
-
SHA512
14c54cc35d48d818adbeec60ac77fcb3822bedcce4c96785b21c71c71cf138c3e00d6619dfa26b491c6de6fbae72028e5d947a4dda4d7279be9e2f127fe41d0b
-
SSDEEP
49152:owHVlnOYVEbC3rCANLUc8JUFFKKcttN/fquDST7o57zCuHmhMSai2CaU3nxK:DOaE6PFBua07c8OaUB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc4e00bf0b311fcd3ec7429a516ed90dde428e0949406f20974c1654098f008b
Files
-
cc4e00bf0b311fcd3ec7429a516ed90dde428e0949406f20974c1654098f008b.exe windows:4 windows x86 arch:x86
7482cada4e6b6caa80e405a4cd9f5593
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
CryptAcquireContextA
version
GetFileVersionInfoA
wsock32
WSAAsyncGetHostByName
winspool.drv
ClosePrinter
comctl32
FlatSB_GetScrollInfo
comdlg32
GetOpenFileNameW
gdi32
AbortDoc
msimg32
AlphaBlend
shell32
SHGetFileInfoW
user32
ActivateKeyboardLayout
winmm
sndPlaySoundA
ole32
CLSIDFromProgID
oleaut32
CreateErrorInfo
gdiplus
GdiplusStartup
Sections
.text Size: 3.4MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE