Static task
static1
Behavioral task
behavioral1
Sample
c2aacc5a8131dbe1e673ab87dad4f1d5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c2aacc5a8131dbe1e673ab87dad4f1d5.exe
Resource
win10v2004-20240226-en
General
-
Target
c2aacc5a8131dbe1e673ab87dad4f1d5
-
Size
331KB
-
MD5
c2aacc5a8131dbe1e673ab87dad4f1d5
-
SHA1
f85510b8692eafa4d952e732129204ef794ce74c
-
SHA256
dc80a3cbc6d08d04b488367e439c589389d567d847459ea5e54a31645d2eb2d4
-
SHA512
0cfd850cf347a66e4cea010e63cf2fdf72a00f4c7d5941369b62ef5c7f097454f08a4fd8afb1c5a18a5b3b840762473a11e2cf5c2fbe77568ee28ad6eb629f0b
-
SSDEEP
6144:QOf8nTW0kX8MHfWA705nXJaWzbee0wqoh1P9GGvrnOF/NPNIYGJmdQ2V7v/tR9F6:Lfa60q905XBjhFnI/RNIZ8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2aacc5a8131dbe1e673ab87dad4f1d5
Files
-
c2aacc5a8131dbe1e673ab87dad4f1d5.exe windows:4 windows x86 arch:x86
2a2bf09d8ac6117eb0aaab03ff8e1d2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileA
Sleep
HeapDestroy
HeapCreate
SetFilePointer
SetThreadPriority
CreateThread
CloseHandle
WaitForSingleObject
FindResourceA
LoadResource
SizeofResource
lstrlenA
lstrcpyA
lstrcatA
SetLastError
RtlZeroMemory
RtlMoveMemory
GetProcAddress
GetModuleHandleA
CreateMutexA
GetLastError
ExitProcess
HeapAlloc
user32
ShowWindow
SetWindowTextA
SetWindowRgn
SetWindowPos
SetWindowLongA
SetLayeredWindowAttributes
SetFocus
SetDlgItemTextA
SendMessageA
OffsetRect
LoadIconA
GetWindowRect
GetWindowLongA
GetDlgItemTextA
GetDlgItem
GetClientRect
FrameRect
FillRect
EndPaint
EndDialog
DrawTextA
DialogBoxParamA
CharUpperA
BeginPaint
wsprintfA
comctl32
InitCommonControls
gdi32
CombineRgn
CreatePen
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DeleteObject
LineTo
MoveToEx
RoundRect
SelectObject
SetBkMode
SetTextColor
CreateFontA
winmm
waveOutGetPosition
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
waveOutClose
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ