Static task
static1
Behavioral task
behavioral1
Sample
c211370ca43e21374c289d0aeaa8c888.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c211370ca43e21374c289d0aeaa8c888.exe
Resource
win10v2004-20240226-en
General
-
Target
c211370ca43e21374c289d0aeaa8c888
-
Size
28KB
-
MD5
c211370ca43e21374c289d0aeaa8c888
-
SHA1
7580adc8731ce8f4d51d8d6b1319f36ceea7f6f8
-
SHA256
21e33ba21a854571bef354d4ce36f92ea84e833b98db73cf6254c191166f6eed
-
SHA512
167aa09637b17b13ed55c4dd831ebf1903acd1ec0bce8591ad710b9f71fde309dfc4c4b01b81d7b5508e004feac9f725a671b5151792580dcffbd9bf6264b7ae
-
SSDEEP
96:EIzQRuLzK6RhcQzzfCYK9LePEoz9Eozx/:EImY3xeYK9LaEo5Eod
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c211370ca43e21374c289d0aeaa8c888
Files
-
c211370ca43e21374c289d0aeaa8c888.exe windows:4 windows x86 arch:x86
2ddb4a1651f15439d86050fa19a5c4d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
wsprintfA
SetTimer
RegisterClassExA
PostQuitMessage
KillTimer
GetMessageA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
kernel32
lstrlenA
lstrcpynA
lstrcmpiA
WinExec
Process32Next
CloseHandle
CreateToolhelp32Snapshot
ExitProcess
GetCommandLineA
GetModuleHandleA
Process32First
lstrcmpA
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
wsock32
inet_ntoa
gethostbyname
WSAStartup
wininet
InternetGetConnectedState
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE