Static task
static1
Behavioral task
behavioral1
Sample
c033c3ce196d575ab3821f7ca6a3cbd9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c033c3ce196d575ab3821f7ca6a3cbd9.exe
Resource
win10v2004-20240226-en
General
-
Target
c033c3ce196d575ab3821f7ca6a3cbd9
-
Size
392KB
-
MD5
c033c3ce196d575ab3821f7ca6a3cbd9
-
SHA1
545d312e5b57d45ada675f1648346ab9a494ea31
-
SHA256
be3c638f1865d3a71cd47734fba10b88ac54849122ec08605e23c9b3083ba929
-
SHA512
44ff866280159e1770d6a7e1cb976cf59db46fb6dc04b38b85102354b842c8d674fe8ede05fa7c394cf098d26acbaa6f34222d64f63e8dbdce20ecfa98c87819
-
SSDEEP
6144:ce1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4xFjJv:h/ApUvsfRh+ajZCBAMXoUK0VHQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c033c3ce196d575ab3821f7ca6a3cbd9
Files
-
c033c3ce196d575ab3821f7ca6a3cbd9.exe windows:4 windows x86 arch:x86
d66a4472868b1d79e4e28794d656d801
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetEnvironmentVariableA
GetProcessHeap
UnmapViewOfFile
SetLastError
SetConsoleCursorInfo
GlobalFree
FindClose
ExitThread
CreateMutexA
CreateFileA
HeapDestroy
HeapCreate
GetLastError
ReleaseMutex
LoadLibraryExW
GetACP
LocalUnlock
GetModuleHandleA
TlsGetValue
user32
GetDC
GetIconInfo
DrawMenuBar
DispatchMessageA
IsWindow
DefWindowProcW
GetFocus
FillRect
GetDlgItem
CheckRadioButton
DrawEdge
CopyRect
CallWindowProcA
uxtheme
DrawThemeEdge
DrawThemeText
GetThemeSysInt
DrawThemeIcon
GetThemeRect
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ