Static task
static1
Behavioral task
behavioral1
Sample
26cf8b53484cadfa1773b65047677ffe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26cf8b53484cadfa1773b65047677ffe.exe
Resource
win10v2004-20231222-en
General
-
Target
26cf8b53484cadfa1773b65047677ffe
-
Size
7KB
-
MD5
26cf8b53484cadfa1773b65047677ffe
-
SHA1
c4f1fee5111b924202c051f57c860354a27c6c22
-
SHA256
2aa5bfa3959a7143866925f76214aadb733173712179329cc6ff65e544c2cf68
-
SHA512
7080b71e92d7c9f6db24606248a352359178002a827dd13b72b4a161653ba77eeb5e6e2845b8778953023135037d4311a05995f2d9f1c735d4638ad053348bd9
-
SSDEEP
192:okyv97o1Yc8eKYL1VQHnSWRo2hvkX8pXm/mzH:LI97ez/UBRlkXaWez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26cf8b53484cadfa1773b65047677ffe
Files
-
26cf8b53484cadfa1773b65047677ffe.exe windows:4 windows x86 arch:x86
b6c06df7a2ffb994f7ccc68097389822
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
CreateFileA
lstrcpynA
lstrcmpA
lstrlenA
WriteFile
LoadLibraryA
FreeLibrary
GetVersion
LocalFree
CloseHandle
lstrcpyA
GetProcAddress
lstrcatA
user32
wsprintfA
CharToOemA
IsCharAlphaNumericA
advapi32
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
msvcrt
??3@YAXPAX@Z
memset
strlen
strstr
malloc
_CxxThrowException
??1type_info@@UAE@XZ
oleaut32
GetErrorInfo
Sections
.text Size: 4KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE