Static task
static1
Behavioral task
behavioral1
Sample
c2defd9e928ca9c1c605619363e9d823.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2defd9e928ca9c1c605619363e9d823.exe
Resource
win10v2004-20240226-en
General
-
Target
c2defd9e928ca9c1c605619363e9d823
-
Size
116KB
-
MD5
c2defd9e928ca9c1c605619363e9d823
-
SHA1
66fb2f31736b72f8ea1256bd04f161b15891c3f4
-
SHA256
e1d600f201aa134da1157a85d2efc57d30593fe31ad054cc54c4a0a3e0efe45c
-
SHA512
78b92de20f02b02d78295b9778b67e24437c4e0ecfa7083a3d2b44e159e2005d9c687015a9ff94dba9772c75a39a0c06e31c27d588f61f49e708f3e243d40bd9
-
SSDEEP
1536:5Tda9Ax/xRYqV3TMEIF3cfD2R/kRAWlcg41BX8NHXr2ZujaxQT6ErLQih+QT:Bd6Q5WqVYEIF3VdkRLcgcZCarih+QT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2defd9e928ca9c1c605619363e9d823
Files
-
c2defd9e928ca9c1c605619363e9d823.exe windows:4 windows x86 arch:x86
ace154dd28c2a64c6790832ef5481d58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextAlign
SetMapMode
SetTextColor
GetStockObject
DeleteDC
RectVisible
CreatePalette
SaveDC
RestoreDC
SelectObject
GetObjectA
GetClipBox
GetDeviceCaps
DeleteObject
LineTo
SelectPalette
SetStretchBltMode
CreateFontIndirectA
CreateSolidBrush
user32
GetDC
GetParent
CharNextA
GetSystemMetrics
TranslateMessage
GetDesktopWindow
kernel32
QueryPerformanceCounter
GetSystemTime
CopyFileA
lstrlenA
DeleteFileA
RemoveDirectoryA
lstrcmpiA
GlobalFindAtomA
lstrcmpA
GetCommandLineA
lstrlenW
GetModuleHandleA
lstrcmpiW
GetWindowsDirectoryA
RemoveDirectoryW
FindClose
VirtualAlloc
VirtualFree
glu32
gluNurbsCallback
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ