Static task
static1
Behavioral task
behavioral1
Sample
c1d0f7af1d75fd65a3584f7aba655422.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c1d0f7af1d75fd65a3584f7aba655422.exe
Resource
win10v2004-20240226-en
General
-
Target
c1d0f7af1d75fd65a3584f7aba655422
-
Size
56KB
-
MD5
c1d0f7af1d75fd65a3584f7aba655422
-
SHA1
dd46549398d9d04db92f601efcd1ffca33c25f98
-
SHA256
98cec4f7f95b89d6ef19817387d271adf778976f037382abc9acae4548214e60
-
SHA512
2bad18155a59ffa303f9c1faef9f432e0e38144664c0b69b75adb495c9f28de08c4744d93e944de3e1676f9c2a70e41f02bee8fb1ebcaa2c9a6a0cd008df1d45
-
SSDEEP
1536:Y8PXIG+sSmIdJbsxFKvJ/qZDWIs6ca6D:hgPD4oGWo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1d0f7af1d75fd65a3584f7aba655422
Files
-
c1d0f7af1d75fd65a3584f7aba655422.exe windows:0 windows x86 arch:x86
d080d0495e5e341cf95d76b0f9586706
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
lstrcmpiA
GetModuleFileNameA
VirtualAlloc
AddAtomA
GetStartupInfoW
SetEvent
Sleep
GetEnvironmentVariableW
FlushFileBuffers
RemoveDirectoryW
GetVersionExW
GetShortPathNameA
GetEnvironmentVariableA
ExitProcess
GetFileTime
Beep
lstrlenW
GetAtomNameA
DisconnectNamedPipe
DuplicateHandle
MultiByteToWideChar
CreatePipe
DosDateTimeToFileTime
GetAtomNameW
OpenEventA
Beep
user32
InvalidateRgn
CreateDialogParamA
GetWindowTextW
GetClassLongW
IsWindowEnabled
GetDlgItemTextW
GetDesktopWindow
CreateDialogIndirectParamW
MessageBoxIndirectW
GetKeyboardLayout
LoadCursorA
gdi32
GetStockObject
StretchBlt
FillRgn
GetDIBits
CreateBitmapIndirect
advapi32
RegFlushKey
RegSaveKeyW
RegDeleteKeyA
comdlg32
ChooseFontA
shell32
SHCreateDirectory
ole32
CoInitializeEx
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ