Static task
static1
Behavioral task
behavioral1
Sample
c0ec3a2ad31dd4c25619aea79154fb53.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c0ec3a2ad31dd4c25619aea79154fb53.exe
Resource
win10v2004-20231215-en
General
-
Target
c0ec3a2ad31dd4c25619aea79154fb53
-
Size
176KB
-
MD5
c0ec3a2ad31dd4c25619aea79154fb53
-
SHA1
36f28fe37f5241a6eb8f24f9eb050f4d4e6dd6d5
-
SHA256
788776c9468c2afd10b7ad3970ed4c8e4aff95013a317bced276c8100b1f3fd9
-
SHA512
0f8e1a586e09c94b28f09d1312dc19475af6b05ad6b60de0c88b1391b6a5e9b1b45ff6a4f4f421e81a9adbf4e31068e077166ed7c8a363bd8629f92f6f432672
-
SSDEEP
3072:l+ZHvwDFLvg0tkLPXlumej1di7Iv9YXPgS2aQrojkhLuerjoYdIBQdZmF/HrA82:AZHMmjXYmExyXPg/aQro4tjrj1eJrAx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0ec3a2ad31dd4c25619aea79154fb53
Files
-
c0ec3a2ad31dd4c25619aea79154fb53.exe windows:1 windows x86 arch:x86
a6cbaaee3d3ac49bcb84297f320e54b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
GetLastError
GlobalLock
GlobalUnlock
GlobalReAlloc
MultiByteToWideChar
lstrcpyA
GlobalAlloc
GlobalFree
lstrcmpiA
lstrlenA
WideCharToMultiByte
VirtualFree
GetFileType
VirtualAlloc
GetCPInfo
GetOEMCP
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetACP
ExitProcess
GetVersion
RtlUnwind
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
GetModuleHandleA
MulDiv
GetProcAddress
comdlg32
ChooseColorA
gdi32
RectVisible
CreateFontA
GetDeviceCaps
GetTextExtentPointA
DeleteObject
SetBkMode
SelectObject
Rectangle
ExtTextOutA
SetTextAlign
GetStockObject
CreateSolidBrush
LineTo
MoveToEx
SelectClipRgn
Polygon
CreateRectRgn
CreatePen
user32
EndDialog
InvalidateRect
SetTimer
wsprintfA
EndPaint
FillRect
DrawEdge
IsIconic
BeginPaint
GetClientRect
EnableMenuItem
SetWindowLongA
SetWindowWord
GetWindowLongA
SetWindowTextA
PtInRect
ScreenToClient
GetCursorPos
DrawMenuBar
RemoveMenu
InflateRect
DialogBoxParamA
SendDlgItemMessageA
ScrollWindowEx
SetDlgItemTextA
CheckDlgButton
GetDlgItemTextA
IsDlgButtonChecked
EnableWindow
MessageBeep
SetFocus
GetSysColorBrush
CreateWindowExA
SetClassLongA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
TranslateAcceleratorA
InsertMenuItemA
KillTimer
PostQuitMessage
DefWindowProcA
PostMessageA
SendMessageA
ShowWindow
IsZoomed
DestroyWindow
CheckMenuItem
GetMenu
GetSubMenu
GetDC
SetWindowPos
WinHelpA
GetWindowPlacement
ReleaseDC
SetWindowPlacement
OemToCharA
GetDlgItem
MessageBoxA
advapi32
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegConnectRegistryA
comctl32
ord6
CreateToolbarEx
shell32
ShellAboutA
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 51B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ