Static task
static1
Behavioral task
behavioral1
Sample
c270978c7bc9f5fcaa454c29d6d01b18.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c270978c7bc9f5fcaa454c29d6d01b18.exe
Resource
win10v2004-20240226-en
General
-
Target
c270978c7bc9f5fcaa454c29d6d01b18
-
Size
23KB
-
MD5
c270978c7bc9f5fcaa454c29d6d01b18
-
SHA1
96c92626b56bf672961dd5a4fbe150daa3a9bd67
-
SHA256
1d46fdef1c8486ecfcf80213160016712526b03776034da3c03e1bdc3e103455
-
SHA512
e748080f13b9b6849d039abfaf4e24b557cae45d8fc45009f58d767a5b8893cac076b1d0c8c2465fe9d700c6bd0b3421eaa27f09b9f2ee639c7133e4ac024517
-
SSDEEP
384:nxlrzx/izze61gnJtp+bMNIWNHWR9+EMQPD:nXPxqngbYYhY9lTD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c270978c7bc9f5fcaa454c29d6d01b18
Files
-
c270978c7bc9f5fcaa454c29d6d01b18.exe windows:5 windows x86 arch:x86
ce88990ade6cac864248baefdaaf3fb6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
msvcrt
memset
memcpy
advapi32
RegOpenKeyExA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ