Static task
static1
Behavioral task
behavioral1
Sample
c2cdce6e69cc30c5d744601c5401aff8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2cdce6e69cc30c5d744601c5401aff8.exe
Resource
win10v2004-20240226-en
General
-
Target
c2cdce6e69cc30c5d744601c5401aff8
-
Size
13KB
-
MD5
c2cdce6e69cc30c5d744601c5401aff8
-
SHA1
8433179e9943699418d144551670f1c80a45dcb0
-
SHA256
863006a932d3830d2b98e308d07fbf46f263ec1542a11bb5b6b3b1f1af865ffb
-
SHA512
806099892d83c269fdede1b314852589154a03b05301011f8958a047cafa13effe8f8a8945446c38080fb873a00cf4cbc6bf718211f984137a24dcb9097b4206
-
SSDEEP
192:6iAObiJUEDmtRpxh4D3mm9CokY/qbSn8dPJqYYL3:6MbpUQLxOD34Cqu8mYYL3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2cdce6e69cc30c5d744601c5401aff8
Files
-
c2cdce6e69cc30c5d744601c5401aff8.exe windows:4 windows x86 arch:x86
bf0a9a95e07598284300d2bfc97f1ef2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
IsBadCodePtr
GetCommandLineA
ExitProcess
Sections
.text Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE