Static task
static1
Behavioral task
behavioral1
Sample
cc40ea50f16f012ecdfc3f657e4314abdd35f7ef0cac8341fa8f26c6119da35a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc40ea50f16f012ecdfc3f657e4314abdd35f7ef0cac8341fa8f26c6119da35a.exe
Resource
win10v2004-20240226-en
General
-
Target
cc40ea50f16f012ecdfc3f657e4314abdd35f7ef0cac8341fa8f26c6119da35a
-
Size
192KB
-
MD5
722a4f6453ceebc622935393b94c92dc
-
SHA1
e6a02a71b8f50067bea2a73ad1c112bec37fbd9a
-
SHA256
cc40ea50f16f012ecdfc3f657e4314abdd35f7ef0cac8341fa8f26c6119da35a
-
SHA512
076fd4e609b0bdffd29f18b4200932676396c54acbec04b79d5f79402f5b56c0e284694b54df48c86b809fe90703c5eb5232dae536f753c91355ed9a40e48f37
-
SSDEEP
6144:sNAwK0I6rzZFpOA+dQ41MEL9888889ygxQQonEem2n:sGwKZ64A+dQ4XL98888815o/n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc40ea50f16f012ecdfc3f657e4314abdd35f7ef0cac8341fa8f26c6119da35a
Files
-
cc40ea50f16f012ecdfc3f657e4314abdd35f7ef0cac8341fa8f26c6119da35a.exe windows:4 windows x86 arch:x86
9d569ac31d2110a0bc6306c8f8f49030
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
BindIoCompletionCallback
WriteProcessMemory
GetNumberOfConsoleInputEvents
SetVolumeLabelW
SetConsoleCursorPosition
GetLocalTime
AddVectoredExceptionHandler
GetLongPathNameA
FindActCtxSectionStringW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE