Static task
static1
Behavioral task
behavioral1
Sample
c02b6c1aabf655b68f61cd65ca4e6cbc.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c02b6c1aabf655b68f61cd65ca4e6cbc.exe
Resource
win10v2004-20240226-en
General
-
Target
c02b6c1aabf655b68f61cd65ca4e6cbc
-
Size
310KB
-
MD5
c02b6c1aabf655b68f61cd65ca4e6cbc
-
SHA1
8e65e5c55d2b27a71601a30a73c39a87baa08a9d
-
SHA256
f4391bc090ad571be844faec59988c771c580371420e7b7fd5cfaffbd20b2c1f
-
SHA512
9756ca77c0aa9edf3616ff9aa6733ed6a1157f6a5bfff23730b3019d086d3367fa4eeef2872bde2178f33b3c45965804d05c62e386d0f483bf479c43a7ac338b
-
SSDEEP
6144:b9IXWdqtoL0EqEFOunCTtBVJ9zz4ZLUtLmLgWuYy0k7luHFbr6hwT:JIXF/bunCR3nz4ZLUNmL9ugke3QwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c02b6c1aabf655b68f61cd65ca4e6cbc
Files
-
c02b6c1aabf655b68f61cd65ca4e6cbc.exe windows:5 windows x86 arch:x86
ef7db70153b89aa135a84fc4405bd5f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__dllonexit
_purecall
_CxxThrowException
_ftol
memmove
free
_initterm
memset
_errno
strchr
malloc
_adjust_fdiv
memcpy
strcmp
??1type_info@@UAE@XZ
_onexit
strlen
__CxxFrameHandler
_except_handler3
?terminate@@YAXXZ
ntdll
NtSetVolumeInformationFile
NtQueryObject
NtReleaseSemaphore
NtQueryQuotaInformationFile
NtGetPlugPlayEvent
NtQueryMultipleValueKey
NtDeleteKey
NtSetQuotaInformationFile
NtOpenProcessToken
NtQueryIoCompletion
NtQueryVolumeInformationFile
kernel32
InitializeCriticalSection
OpenMutexW
GetConsoleCP
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentDirectoryA
InterlockedDecrement
CreateMutexW
OpenEventA
GetProcessHeap
FindResourceExW
GetACP
CloseHandle
GetComputerNameExW
GetThreadLocale
OpenSemaphoreA
OpenSemaphoreW
LocalFree
GetLastError
TlsSetValue
GetSystemDefaultLangID
DisableThreadLibraryCalls
DeleteFileA
GetVersion
GetSystemDefaultLCID
GetVolumeInformationW
lstrcpynW
GetSystemDefaultUILanguage
FindResourceW
WriteFile
CreateFileW
GetUserDefaultUILanguage
FindNextFileA
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
AreFileApisANSI
LCMapStringW
lstrlenW
InterlockedIncrement
GetSystemTime
InterlockedExchange
GlobalFree
CreateMutexA
HeapAlloc
SetFileAttributesW
InterlockedCompareExchange
GetModuleHandleA
IsSystemResumeAutomatic
GetFileAttributesW
GlobalAlloc
FreeEnvironmentStringsA
lstrcpyW
CreateEventA
lstrcmpiW
SetEvent
CreateThread
LoadLibraryA
CreateEventW
CreateSemaphoreW
GetEnvironmentStringsA
FindAtomA
ReleaseSemaphore
AddAtomA
LocalAlloc
CreateSemaphoreA
GlobalMemoryStatusEx
ReadFile
QueryPerformanceCounter
GetModuleHandleW
GetTickCount
PulseEvent
GetCurrentThreadId
GetCurrentProcessId
GetProcessHeaps
Sleep
GetSystemTimeAsFileTime
TerminateProcess
VirtualAlloc
GetCurrentProcess
GetOEMCP
HeapCreate
UnhandledExceptionFilter
TlsAlloc
SetUnhandledExceptionFilter
FindClose
OpenMutexA
GetDriveTypeW
GetLogicalDriveStringsW
GetStdHandle
lstrcmpW
MultiByteToWideChar
ReleaseMutex
ExpandEnvironmentStringsW
GetLocaleInfoW
FreeLibrary
TlsGetValue
GetProcAddress
GetConsoleAliasExesLengthA
GetUserDefaultLCID
GetCommandLineA
FindResourceExA
FindResourceA
GetVersionExA
LoadLibraryW
HeapDestroy
GetStartupInfoA
WaitForSingleObject
GetUserDefaultLangID
SystemTimeToFileTime
FormatMessageW
user32
DispatchMessageW
CharNextW
GetDesktopWindow
PostThreadMessageW
SendMessageA
GetClipboardViewer
LoadStringW
GetProcessDefaultLayout
GetClipboardOwner
GetInputState
ShowWindow
GetCaretBlinkTime
EnumWindows
FindWindowExA
GetMessageA
TranslateMessage
LoadBitmapA
LoadMenuA
PostQuitMessage
GetActiveWindow
wsprintfW
UpdateWindow
GetDoubleClickTime
PeekMessageW
CreateWindowExA
CountClipboardFormats
GetCapture
GetForegroundWindow
FindWindowA
MsgWaitForMultipleObjects
advapi32
RegOpenKeyExA
GetLengthSid
IsValidSid
ConvertStringSidToSidW
ConvertSidToStringSidW
EqualSid
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
CopySid
RegEnumKeyExA
LookupAccountNameW
LookupAccountSidW
RegQueryValueExA
ReportEventW
DeregisterEventSource
RegisterEventSourceW
RegOpenKeyExW
RegSetValueExW
netapi32
NetUserGetInfo
NetGetDCName
NetApiBufferFree
ole32
CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
secur32
TranslateNameW
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 200KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 34KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ