Static task
static1
Behavioral task
behavioral1
Sample
c2d544900732324952a3f7c574f415b4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2d544900732324952a3f7c574f415b4.exe
Resource
win10v2004-20240226-en
General
-
Target
c2d544900732324952a3f7c574f415b4
-
Size
502KB
-
MD5
c2d544900732324952a3f7c574f415b4
-
SHA1
7b3ac261f871020600031dd16ff883bff5a3f6a8
-
SHA256
da8c58dd189d4b8fee417e9e140bd32dc4d64fc24c9158bd8c60b6627c3075e5
-
SHA512
a1f65881b08e515138df5671b6a1c21fb4cb87002ae9087112d0fef859abc713a32c22c1563a3e523f07c66f4e353a192d497649e45c76d6999f6698518d6153
-
SSDEEP
12288:LNz9isjJ3Up5nzxIoVkqZd6uTClJbmSLJXewjXLscYq:LNz9lFUpleGR9ClxmeVeZc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2d544900732324952a3f7c574f415b4
Files
-
c2d544900732324952a3f7c574f415b4.exe windows:4 windows x86 arch:x86
14ec25f6477b44310fca44514dfce592
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
GetEnvironmentStrings
HeapCreate
LeaveCriticalSection
GetCommandLineA
HeapSize
GetSystemInfo
GetCurrentProcess
DeleteCriticalSection
lstrlen
TlsGetValue
GetFileType
ReadFile
QueryPerformanceCounter
OpenMutexA
IsValidCodePage
GetOEMCP
LCMapStringW
LoadLibraryA
GetTickCount
HeapDestroy
UnhandledExceptionFilter
GetModuleHandleA
HeapFree
MapViewOfFileEx
TlsFree
GetLocaleInfoA
GetCPInfo
GetACP
GetDateFormatA
GetStartupInfoA
TlsAlloc
HeapReAlloc
GetStringTypeW
FreeEnvironmentStringsW
SetFilePointer
EnterCriticalSection
TerminateProcess
GetLastError
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLocaleInfoW
RtlUnwind
GetCurrentProcessId
CreateMutexA
GetProcAddress
HeapAlloc
FoldStringW
WideCharToMultiByte
GetCurrentThread
SetHandleCount
MultiByteToWideChar
CloseHandle
GetStringTypeA
WriteFile
VirtualProtect
CompareStringW
CompareStringA
LCMapStringA
GetUserDefaultLCID
VirtualFree
ExitProcess
IsValidLocale
IsBadWritePtr
GetEnvironmentStringsW
GetTimeZoneInformation
VirtualQuery
SetStdHandle
GetTimeFormatA
GetCurrentThreadId
TlsSetValue
GetVersionExA
InterlockedExchange
FreeEnvironmentStringsA
SetLastError
GetStdHandle
InitializeCriticalSection
SetEnvironmentVariableA
VirtualAlloc
GetNamedPipeInfo
EnumSystemLocalesA
advapi32
RegSetValueA
CryptSetProviderExA
LookupPrivilegeValueW
DuplicateToken
RegSaveKeyA
RegCloseKey
CryptGetDefaultProviderA
RegCreateKeyExW
RegSaveKeyW
CryptGetUserKey
CryptContextAddRef
CryptGetDefaultProviderW
CryptDestroyKey
RegEnumKeyW
CryptAcquireContextA
RegReplaceKeyW
RegDeleteValueW
user32
GrayStringA
DdeGetLastError
DialogBoxIndirectParamW
DispatchMessageA
RegisterClassExA
RegisterClassA
SetPropA
IsIconic
SetUserObjectInformationW
comctl32
InitCommonControlsEx
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ