Static task
static1
Behavioral task
behavioral1
Sample
c0ce036cafeb1a8fe9982e34edf3520a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0ce036cafeb1a8fe9982e34edf3520a.exe
Resource
win10v2004-20240226-en
General
-
Target
c0ce036cafeb1a8fe9982e34edf3520a
-
Size
505KB
-
MD5
c0ce036cafeb1a8fe9982e34edf3520a
-
SHA1
5be6c53bdb915bcd3dff569b9445f741ffd94049
-
SHA256
863a00bcc7002b7a86c2bce6459b84ab9089ddc6f8e8dd400a530ca4dcba748f
-
SHA512
89f66958269e3aa19c86e4e072dc5e8d79223916b7b1f99a8cf84dfd4e454a36c3ae22c4eedd4b90b4d79d47fee11f9f19b8d28056bd7cec21687891e83c7c2f
-
SSDEEP
12288:QFN6bhAwqM2bzxQak5Lcaso7XJYYojY1zpd23RHuBIj2Di6U3zt:xJqM2u3xsGSHjYzYh4fU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0ce036cafeb1a8fe9982e34edf3520a
Files
-
c0ce036cafeb1a8fe9982e34edf3520a.exe windows:4 windows x86 arch:x86
5745194b068e45010307a4f5bbc8a09d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleW
DisableThreadLibraryCalls
SetLastError
FreeLibrary
HeapDestroy
DisableThreadLibraryCalls
GetTickCount
HeapAlloc
lstrcmpiW
LoadLibraryA
lstrlenA
GetSystemTimeAsFileTime
GetVersionExA
GetCurrentProcessId
LocalAlloc
CreateFileW
HeapAlloc
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
MultiByteToWideChar
Sleep
GetLastError
EnterCriticalSection
GetModuleHandleA
GetCurrentProcess
CreateFileW
LeaveCriticalSection
DeleteCriticalSection
CreateThread
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
EnterCriticalSection
HeapAlloc
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentThreadId
EnterCriticalSection
HeapAlloc
VirtualProtect
GetTickCount
LoadLibraryA
QueryPerformanceCounter
HeapDestroy
GetTickCount
Sleep
GetProcAddress
LoadLibraryA
HeapFree
VirtualProtect
VirtualProtect
VirtualAlloc
InitializeCriticalSection
lstrlenA
VirtualProtect
gdi32
CreateFontIndirectA
CreateBitmapIndirect
Polygon
GetCurrentObject
CombineRgn
CreateBitmap
SetBrushOrgEx
SetBkColor
SetTextColor
CreateBitmapIndirect
SelectObject
CreateBitmap
CreateBitmapIndirect
GetBkMode
BitBlt
BitBlt
SetBkMode
GetCurrentObject
SetPixel
SetTextColor
BitBlt
GetPixel
GetBkMode
PatBlt
SetBkColor
StretchBlt
GetBkColor
Ellipse
Ellipse
GetPixel
GetWindowExtEx
RoundRect
CreateDIBSection
GetBkColor
PatBlt
GetWindowExtEx
BitBlt
CreateCompatibleDC
RoundRect
Ellipse
CreateCompatibleDC
SetBrushOrgEx
SetBkMode
GetWindowOrgEx
GetCurrentObject
StretchBlt
CreateDIBitmap
StretchBlt
Ellipse
CreateBitmapIndirect
SetPixel
RoundRect
SetWindowOrgEx
MoveToEx
Rectangle
GetWindowExtEx
GetWindowExtEx
RoundRect
CreateBitmapIndirect
SetWindowOrgEx
Sections
.text Size: 499KB - Virtual size: 964KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ