Static task
static1
Behavioral task
behavioral1
Sample
c1edd523010c4c3b3349ade89a2229c8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1edd523010c4c3b3349ade89a2229c8.exe
Resource
win10v2004-20240226-en
General
-
Target
c1edd523010c4c3b3349ade89a2229c8
-
Size
496KB
-
MD5
c1edd523010c4c3b3349ade89a2229c8
-
SHA1
ca8838afb0009c532ead2a54f208cc602f63209e
-
SHA256
dabc1c47d6ed8ab729bec4791728c222f3d564eb5a2aa53487c3bc1b4c5390e9
-
SHA512
a1bfcf784fc7712417af180828e987d8bdb00c9ac7ac429181fa3ac0a05816980af83d8e367d7d2ba30fad1ab1a5925c49b613ac9f70d7b336623e3077832a61
-
SSDEEP
12288:rub7TRpJXjnDyLCISxqU/+4AZ2yw4IiSYaab9TaEWF1AZF:rubnRpVjnueISxuZKHYf/pf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1edd523010c4c3b3349ade89a2229c8
Files
-
c1edd523010c4c3b3349ade89a2229c8.exe windows:4 windows x86 arch:x86
9ecde472c0916b0b99a5abc9992b1224
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetCurrentThreadId
HeapAlloc
GetTickCount
FindClose
VirtualFree
LoadResource
InitializeCriticalSection
TerminateProcess
SetFileAttributesA
GetVersion
GetDiskFreeSpaceA
DeleteFileW
FindFirstFileA
WriteFile
ReadFile
CreateThread
RaiseException
CompareStringW
SetStdHandle
GetProcAddress
GetCommandLineA
HeapSize
MultiByteToWideChar
LocalAlloc
SizeofResource
GetModuleFileNameA
GetEnvironmentStringsW
ExitProcess
WaitForSingleObject
GetStdHandle
HeapFree
VirtualAlloc
GetProcessHeap
GetModuleHandleA
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetFileType
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetFocus
SetTimer
GetWindowLongA
RegisterClassA
GetKeyState
GetSysColor
TranslateMessage
GetSystemMetrics
GetParent
ShowWindow
GetMessageA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 440KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ