Static task
static1
Behavioral task
behavioral1
Sample
cntc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cntc.exe
Resource
win10v2004-20231215-en
General
-
Target
cntc.exe
-
Size
53KB
-
MD5
4850bd1a020f9603ce1202fe59ed22e6
-
SHA1
9a32b91444cb7de1cccf111f96e28f0c2c77244c
-
SHA256
9c40564f9be889ac2fa611dd1bd7dbfd4e00206bddcdfd4af7cccbffd3da6043
-
SHA512
0b727263ae367f3525a8aa0e148aed2985fe5a746d7811dca3da226b0192b0c34edfb7f435eb65643803fea988f4fc6d6bde8a62173434581bb403a5c30d6bc7
-
SSDEEP
768:X4KUggozsENBUu8x0TeJtqyXbOfq1ck9VdlI/:X4KUggozsENV85nbOa9VY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cntc.exe
Files
-
cntc.exe.exe .ps1 windows:4 windows x64 arch:x64 polyglot
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ