Static task
static1
Behavioral task
behavioral1
Sample
c09ec616bdd3b454e607dee957243027.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c09ec616bdd3b454e607dee957243027.exe
Resource
win10v2004-20240226-en
General
-
Target
c09ec616bdd3b454e607dee957243027
-
Size
224KB
-
MD5
c09ec616bdd3b454e607dee957243027
-
SHA1
edbddf690c2eef6b8155bb2c1e4fee911f82b82d
-
SHA256
e98830947bffaf5a8456320794c589e6e59e2797871526c23ff63d0a6685d900
-
SHA512
f9d8b8dc36f91e674db95bd4f511eab8b2238251e767ed89843a75c1cc52acb876c076860148c75f4a347d6c31b3e851d0a88007ae16778fcea05aa98a652f9a
-
SSDEEP
3072:PZH+Nn351N+RlNkHK3w4KEJ7oc6TFbijsxKxjaR9VBi98exyNTWibSyeeXI5Xr:RHInbs173wfksKxOR5i/T04eXIZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c09ec616bdd3b454e607dee957243027
Files
-
c09ec616bdd3b454e607dee957243027.exe windows:5 windows x86 arch:x86
116e56a71f62d57152ae8f860577c46d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GlobalAlloc
Sleep
HeapCreate
MultiByteToWideChar
GlobalUnlock
GetLastError
SetLastError
VirtualAlloc
GlobalFree
GetCurrentThreadId
LocalFree
SetHandleCount
GetEnvironmentStringsW
CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
IsProcessorFeaturePresent
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GlobalLock
InterlockedDecrement
InterlockedIncrement
HeapAlloc
DeleteCriticalSection
GetFileType
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
WideCharToMultiByte
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
RtlUnwind
EncodePointer
DecodePointer
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetProcAddress
GetCPInfo
InitializeCriticalSectionAndSpinCount
user32
DialogBoxIndirectParamA
GetIconInfo
GetDC
GetForegroundWindow
ReleaseDC
GetDlgItem
IsWindow
gdi32
CreateCompatibleDC
DeleteObject
oleaut32
VariantClear
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ