Static task
static1
Behavioral task
behavioral1
Sample
c2348e9ecfe4dd3a38104ecb044b1077.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2348e9ecfe4dd3a38104ecb044b1077.exe
Resource
win10v2004-20240226-en
General
-
Target
c2348e9ecfe4dd3a38104ecb044b1077
-
Size
1.2MB
-
MD5
c2348e9ecfe4dd3a38104ecb044b1077
-
SHA1
c9ef181217f9077e7df1c0801ed77c93879b66a8
-
SHA256
db93aa24827378fdb7ab1cbcb5e66a85626db608909228db08d34fdb427505ab
-
SHA512
0c3e372cee46a973435c29e06dcdf84f9f8c842f93fe28c8dcc00bfbb21db3a3b07b68704de578c1ab898166f12a8f5baf024c204d7d10361e4181f3efd63f1f
-
SSDEEP
24576:hGl8rMtQ/TTBsDZR9fMjhNplBeDvgD2p4cOQoplet12S:UyraQ/TTBcvUn0LmQ5OQopIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2348e9ecfe4dd3a38104ecb044b1077
Files
-
c2348e9ecfe4dd3a38104ecb044b1077.exe windows:4 windows x86 arch:x86
ba2129880a1d60c41209ce8b3284d84f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegOpenKeyExA
comctl32
InitCommonControls
gdi32
GetTextMetricsA
oleaut32
UnRegisterTypeLib
shell32
ShellExecuteA
user32
SystemParametersInfoA
winmm
midiStreamRestart
winspool.drv
ClosePrinter
ws2_32
inet_addr
comdlg32
GetFileTitleA
ole32
CLSIDFromString
Sections
.nsp0 Size: 1.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE