Static task
static1
Behavioral task
behavioral1
Sample
c4696c5d971d84dc6d8838b9b3615f2c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4696c5d971d84dc6d8838b9b3615f2c.exe
Resource
win10v2004-20240226-en
General
-
Target
c4696c5d971d84dc6d8838b9b3615f2c
-
Size
74KB
-
MD5
c4696c5d971d84dc6d8838b9b3615f2c
-
SHA1
70b1a80d05466bf1a4a163cfc0afffdc40f977c0
-
SHA256
e7773a52a4102817a954105216fe37f9c34f88a67339e5131fe8fed53fc2e7e6
-
SHA512
0758307adc3addc56a61af90c6191ecb0d4becd6853f1b092d18c4aa4948cc661bba2513bb9c6998643e059a4bc142141114b39134f01148a897f60e69ab2ccd
-
SSDEEP
768:XfdJrnBFKRPBNU3LqkiOVdHOz3DBshJw0+p42ioooooooooooooooooooooooool:XfXB0Numkiew3DMJq429
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4696c5d971d84dc6d8838b9b3615f2c
Files
-
c4696c5d971d84dc6d8838b9b3615f2c.exe windows:4 windows x86 arch:x86
6605d900aef3ddfa5fe5ba4e5601fdaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetFileSize
CreateFileMappingA
lstrlenA
lstrcpyA
lstrcatA
WriteFile
UnmapViewOfFile
CloseHandle
CopyFileA
CreateFileA
MapViewOfFile
SetFilePointer
GetModuleFileNameA
GetModuleHandleA
comdlg32
GetOpenFileNameA
user32
EndDialog
SetDlgItemTextA
SendMessageA
LoadIconA
IsDlgButtonChecked
GetDlgItem
CheckDlgButton
DialogBoxParamA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 718B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE