Static task
static1
Behavioral task
behavioral1
Sample
2c9b02f70f403a77bf8bc134847eeaf5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c9b02f70f403a77bf8bc134847eeaf5.exe
Resource
win10v2004-20231215-en
General
-
Target
2c9b02f70f403a77bf8bc134847eeaf5
-
Size
3.7MB
-
MD5
2c9b02f70f403a77bf8bc134847eeaf5
-
SHA1
aae89f708e380c270c0495491ab10e696920d5d8
-
SHA256
eb4f5975f3707dd4747816a1df8ae426c53fa74ff5655fb735f65eac77312193
-
SHA512
5a987dc54c1c4233f2fbe86feb0b8c926b3a72a162675600b34706bd995d0b4178d6035e001b253366f981feb6909f7c190e3f0568eb46f12c056093338d938f
-
SSDEEP
98304:lWZ+WFlt0g9nfsTDTTa2zMiA4dHjrmtsxw9nn:luDj0g96nNzMiA4hmOw9n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c9b02f70f403a77bf8bc134847eeaf5
Files
-
2c9b02f70f403a77bf8bc134847eeaf5.exe windows:4 windows x86 arch:x86
8c15f13dcaadaaa55152434c9f80d048
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
wininet
InternetGetConnectedState
urlmon
URLDownloadToFileA
winmm
timeGetTime
Sections
.text Size: 21KB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE