Static task
static1
Behavioral task
behavioral1
Sample
c2e15ea10881cb39f985371c78251ee1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2e15ea10881cb39f985371c78251ee1.exe
Resource
win10v2004-20240226-en
General
-
Target
c2e15ea10881cb39f985371c78251ee1
-
Size
14.3MB
-
MD5
c2e15ea10881cb39f985371c78251ee1
-
SHA1
cf807607ae00fe0073c02ee0eaec335ccef44aa6
-
SHA256
288286c4d17cbae1e4aa5fa3bead5689d61650f7f73764b517d32c8491303f80
-
SHA512
67afb43c3812dee9d3eca2403123e35cc1eb86f4c45c2a69c31feea378a0a4827808064bb83750044479603835f758ac70a9d5da1cb23aed231aa66b0a8380af
-
SSDEEP
1536:fZ1g7uI/N6jE3Nljem0WGbfhI3aqFvJtbjWhSYqo4UO2CkouXE3Hircccccccccz:zgRIjE3jjeJWQfKKq9o9qv3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2e15ea10881cb39f985371c78251ee1
Files
-
c2e15ea10881cb39f985371c78251ee1.exe windows:5 windows x86 arch:x86
73408cbc01e9ca1bce3d5e458bd19652
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExW
GetACP
CreateFileMappingA
GetModuleHandleA
LoadLibraryExA
GetCurrentDirectoryA
GetSystemTime
VirtualAllocEx
ExitThread
GetShortPathNameA
DecodePointer
RemoveDirectoryA
VirtualFreeEx
AllocConsole
ReadFile
shell32
DllRegisterServer
FindExecutableA
ShellMessageBoxW
ShellAboutW
SHQueryRecycleBinA
SHGetFileInfoA
SHGetFolderPathA
SHGetMalloc
SHGetDataFromIDListW
StrStrW
Shell_NotifyIconW
ShellExecuteW
StrRChrW
SHDefExtractIconA
DragQueryPoint
ctl3d32
Ctl3dGetVer
Ctl3dEnabled
Ctl3dCtlColor
Ctl3dRegister
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PDATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rel Size: 14.2MB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ