Static task
static1
Behavioral task
behavioral1
Sample
2c02c009cbb9b7f8f61cf90238f57d26.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2c02c009cbb9b7f8f61cf90238f57d26.exe
Resource
win10v2004-20231215-en
General
-
Target
2c02c009cbb9b7f8f61cf90238f57d26
-
Size
10.2MB
-
MD5
2c02c009cbb9b7f8f61cf90238f57d26
-
SHA1
19db365a9530146970049989ba46d17bfc3f79a6
-
SHA256
28a3d836aff8510c228f5bb7a75ba7e0a7195273bc91b978aa4884f74d460148
-
SHA512
53f0b3ed4cafb4f7cf803c78217eb7c30ba66150422e47473ef8dec9819e90235c8bde16de890db0b8c2f1820bc939bc491402bffd9965587c2b7cd1451857b9
-
SSDEEP
1536:3grtnQ0lULhZotkxdIvblp95RdfSYQnp9EI8JH+PhN06iWWzBWzBWzBWzBWzBWzg:d0lULRxdIjr9bEYQfWePhN06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c02c009cbb9b7f8f61cf90238f57d26
Files
-
2c02c009cbb9b7f8f61cf90238f57d26.exe windows:5 windows x86 arch:x86
816e07d7c149d21a4d07bdee1ab5223a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comsvcs
CoCreateActivity
RecycleSurrogate
advapi32
RegCreateKeyExA
CryptSignHashW
RegSaveKeyA
InitializeAcl
GetUserNameA
RegOpenKeyW
RegDeleteValueW
RegRestoreKeyA
ReadEventLogA
OpenEventLogW
RegEnumKeyA
authz
AuthzFreeContext
AuthzInitializeContextFromSid
AuthzAddSidsToContext
AuthzFreeAuditEvent
AuthzFreeResourceManager
clbcatq
CoRegCleanup
ComPlusMigrate
SetSetupSave
kernel32
AllocConsole
CreateFileW
ExitProcess
VirtualAllocEx
WaitForSingleObject
OpenEventA
LoadLibraryA
LoadLibraryExW
FindClose
GetACP
WriteFile
SetCurrentDirectoryA
GetFileAttributesW
VirtualQuery
GetCurrentDirectoryA
OpenSemaphoreA
GetVolumeNameForVolumeMountPointA
CreateJobObjectW
clusapi
CloseCluster
CloseClusterGroup
CloseClusterNode
ClusterControl
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo� Size: 10.1MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ