Static task
static1
Behavioral task
behavioral1
Sample
c175b8f1c076751d6ee9de5e79880444.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c175b8f1c076751d6ee9de5e79880444.exe
Resource
win10v2004-20240226-en
General
-
Target
c175b8f1c076751d6ee9de5e79880444
-
Size
274KB
-
MD5
c175b8f1c076751d6ee9de5e79880444
-
SHA1
c311419506c31c197fbd1c75ab328243aa96c50c
-
SHA256
911cd2d191eb2ea14f6ffaf4096a275c1d7e3933ea5c621cd3835619011cf78d
-
SHA512
59d42343df3600eb6eeee90bb1b32b6fd9a773a50a177b3bc152761adf66d4b2e9356da2d0faacf2213d70bca292a37bb46c9eabe03aa1d79590dbf07ab857b1
-
SSDEEP
6144:DK6pei6FPeuUjy9Bu9Av/uW4u+AoXoQ+31bA+GWLdw:mwj6F2fC6A8AoX7M5A+GWe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c175b8f1c076751d6ee9de5e79880444
Files
-
c175b8f1c076751d6ee9de5e79880444.exe windows:4 windows x86 arch:x86
104d9c31e6f693c1289af84adca2fbb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
IsValidCodePage
HeapDestroy
DeleteTimerQueue
HeapSize
GetStdHandle
lstrcmpiA
CloseHandle
ReleaseMutex
VirtualProtect
GetDriveTypeA
GetProfileStringA
ResumeThread
GetStartupInfoA
GetLastError
GetTickCount
GetTempPathA
ExitProcess
SetEvent
DeleteCriticalSection
CreateHardLinkA
advapi32
RegEnumValueA
LsaClose
RegCloseKey
CloseEventLog
RegQueryValueExA
ReportEventA
RegCreateKeyExA
LsaSetSecret
LsaFreeMemory
RegLoadKeyA
IsValidSid
IsValidAcl
AccessCheck
IsWellKnownSid
OpenEventLogA
GetSecurityInfo
FreeSid
GetFileSecurityA
CloseTrace
RegEnumKeyExA
apphelp
SdbFreeFlagInfo
SdbFindFirstTag
SdbFindNextTag
ApphelpShowDialog
ApphelpCheckIME
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ