Static task
static1
Behavioral task
behavioral1
Sample
c12eb8fcfdb2f49a452dcd86fd3a60c4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c12eb8fcfdb2f49a452dcd86fd3a60c4.exe
Resource
win10v2004-20240226-en
General
-
Target
c12eb8fcfdb2f49a452dcd86fd3a60c4
-
Size
41KB
-
MD5
c12eb8fcfdb2f49a452dcd86fd3a60c4
-
SHA1
b18b45ad670d2c20bdf1288d691aa4fa710d6837
-
SHA256
eafcfc6475e9fff212e72bc1a92ffa54b5e77f0574ae63a8c3b0db4448f9b30e
-
SHA512
bf73146d2335fe7476656ee9bc377d8928692cc6a45a5c9747a107c2292e93fba407eb9f43ebb4914972b8d4a8a4f9a6c4df08bf4406cb7d03c367e45b1d5858
-
SSDEEP
768:+zuym+bEPemnt1Gocbmt0YXyjB+cD3aREy/jAiWKREy/jAiWbZQ:+zJbEztgoemthY+c7a2mjAiWK2mjAiWb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c12eb8fcfdb2f49a452dcd86fd3a60c4
Files
-
c12eb8fcfdb2f49a452dcd86fd3a60c4.exe windows:1 windows x86 arch:x86
f910010b28dd3b6a795c8a5fdadfba00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CopyFileA
CloseHandle
CreateFileMappingA
CreateProcessA
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetCurrentDirectoryA
GetLastError
DeleteFileA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetSystemTime
GetVersion
GetWindowsDirectoryA
MapViewOfFile
SetEndOfFile
SetFileAttributesA
SetFilePointer
UnmapViewOfFile
WaitForSingleObject
GetModuleFileNameA
user32
MessageBoxA
Sections
CODE Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ