Static task
static1
Behavioral task
behavioral1
Sample
c2927c176f88747b179c27484963749a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2927c176f88747b179c27484963749a.exe
Resource
win10v2004-20240226-en
General
-
Target
c2927c176f88747b179c27484963749a
-
Size
115KB
-
MD5
c2927c176f88747b179c27484963749a
-
SHA1
da39960439e999542ccb5936bc06f220c652bfff
-
SHA256
5cbb507433111ba50e298678d466348593d2fbec2511c149eab4d46946141fea
-
SHA512
c71b82e3c31d7365f82cd06cd800f66c18aa37265aad4630e27baaf059e2249bf1ae0bcf567eb2b455a43d11ec740d2132b16553069be87a090012ae0ebe4f28
-
SSDEEP
1536:D8Nl1u4eyiyF8GRdBWd+J2jtTihUDaaWr8kPGpiFCErYxZymPTxccyERb8q8:s1bes80BK+4tTiaohbL+CERb8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2927c176f88747b179c27484963749a
Files
-
c2927c176f88747b179c27484963749a.exe windows:4 windows x86 arch:x86
14420751c68462306a5e1f66a0c833a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ClearCommBreak
CommConfigDialogA
CreateDirectoryA
CreateEventA
CreateRemoteThread
DuplicateHandle
ExitProcess
FindAtomA
FindResourceA
FindResourceExA
GetAtomNameA
GetCPInfoExA
GetCommandLineA
GetDriveTypeA
GetMailslotInfo
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemDefaultLangID
GetUserDefaultLCID
GlobalUnfix
GlobalUnlock
IsBadHugeWritePtr
LocalHandle
LocalReAlloc
MulDiv
PulseEvent
PurgeComm
QueryDosDeviceA
QueryPerformanceCounter
SetEvent
SetUnhandledExceptionFilter
WaitForMultipleObjects
WaitForSingleObjectEx
WideCharToMultiByte
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE