Static task
static1
Behavioral task
behavioral1
Sample
c1c42841b44829995da629e0667d3fbe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1c42841b44829995da629e0667d3fbe.exe
Resource
win10v2004-20240226-en
General
-
Target
c1c42841b44829995da629e0667d3fbe
-
Size
217KB
-
MD5
c1c42841b44829995da629e0667d3fbe
-
SHA1
cf64519fb91c79598f01f0d67cc7855fda1dfc01
-
SHA256
2e9b29ce3fd4d3fa4ff1013a185ec5c846d92b19db050b111b225f27ead8226f
-
SHA512
8cfd182f87a5f8704984462223f1bae0681ce5438294a738a6b80e791eb1e4f4face4cbb131794a405a2e684323bc28a8401f4af64e3dc419ba52c50604b6712
-
SSDEEP
6144:n3fkUwdbfw998gWNlPTGQQm6agrdB9fK:3fkUCfVNtTird
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1c42841b44829995da629e0667d3fbe
Files
-
c1c42841b44829995da629e0667d3fbe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 54KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE