Static task
static1
Behavioral task
behavioral1
Sample
c174318ff99e3e24b846a415c6ed8a72.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c174318ff99e3e24b846a415c6ed8a72.exe
Resource
win10v2004-20240226-en
General
-
Target
c174318ff99e3e24b846a415c6ed8a72
-
Size
188KB
-
MD5
c174318ff99e3e24b846a415c6ed8a72
-
SHA1
9630a71994c158bc27098af57dcc9bbc1fd3c61b
-
SHA256
1ef427065dd541f488ada32fbfcdfbcf630a2b1acd69d0b8c162cb541d1c4a7d
-
SHA512
80b8e2948e0d7fba8aa7d4a0c62ba86906cafac7ae40459c7f9866e6459473c4c7c517b14d55f601fdcb8975453dfbf8fef10f7359643126f98bfdc8ec990599
-
SSDEEP
3072:OLoNI73PEIiy71e8vc1o7gblEpAsI8LJZiTV1y8U/Av:qoC7fVfpe8U1o4lmAQJgTVBLv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c174318ff99e3e24b846a415c6ed8a72
Files
-
c174318ff99e3e24b846a415c6ed8a72.exe windows:4 windows x86 arch:x86
ac52bfe7e96bfc13f38b7a0347ff307c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
clusapi
CloseCluster
kernel32
GetProcAddress
GetLongPathNameW
EnterCriticalSection
DeleteCriticalSection
IsBadWritePtr
WideCharToMultiByte
InitializeCriticalSection
GetWindowsDirectoryA
SetThreadContext
lstrcatA
GetModuleFileNameA
LoadResource
InterlockedIncrement
HeapReAlloc
HeapAlloc
GetVersion
EnumResourceTypesA
LeaveCriticalSection
lstrcpynA
lstrlenW
ExitProcess
lstrcpyA
DisableThreadLibraryCalls
FindResourceA
HeapFree
GetProcessHeap
LoadLibraryA
InterlockedDecrement
GetFileAttributesA
LockResource
MultiByteToWideChar
lstrlenA
GetLocaleInfoA
user32
EqualRect
GetDlgItem
DestroyWindow
MoveWindow
DefWindowProcA
UnregisterClassA
CharNextA
SetWindowRgn
SetDlgItemTextA
GetWindowRect
SetFocus
PtInRect
LoadAcceleratorsA
GetKeyState
ReleaseDC
GetActiveWindow
IntersectRect
GetDC
EndPaint
SetWindowLongA
BeginPaint
OffsetRect
SetParent
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ