Static task
static1
Behavioral task
behavioral1
Sample
c2f3d3f056222dae737c7f5bdddcc27a.exe
Resource
win7-20240221-en
General
-
Target
c2f3d3f056222dae737c7f5bdddcc27a
-
Size
284KB
-
MD5
c2f3d3f056222dae737c7f5bdddcc27a
-
SHA1
0b02fcec0321da427ee33535b364658260cb950f
-
SHA256
33786303d74bacb93d2e7c82889a94417e4025ed919acf6feb10b3d0297eb9cc
-
SHA512
753185fc6453e52e70d9ae5366d96afe7973c2acfe4173d302dc05995ff3cb152f40a3e00c7365aec88571b0d8e41a1cd037a2e7bef062fd20f3c187b5e86475
-
SSDEEP
6144:V0mJsa0dPA4NNXw0hlx1qepW2cV4/LoDgCJM9/fACv:+GzklN9zx1qGMV4/LT79Zv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2f3d3f056222dae737c7f5bdddcc27a
Files
-
c2f3d3f056222dae737c7f5bdddcc27a.exe windows:4 windows x86 arch:x86
cbeb3549126b8d59fb9773bc91f8e52e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
LocalFree
FindAtomA
GetCurrentDirectoryW
CreateDirectoryW
GetModuleFileNameW
SetLastError
GetModuleHandleA
LocalAlloc
VirtualProtect
DuplicateHandle
GetCurrentThreadId
GetCurrentProcess
GetFileInformationByHandle
SetEnvironmentVariableW
OutputDebugStringA
EnumResourceLanguagesA
MultiByteToWideChar
GetFileAttributesW
SearchPathW
GetStringTypeExW
OutputDebugStringW
WideCharToMultiByte
lstrcmpiW
ExitProcess
lstrlenW
VirtualQuery
InterlockedExchange
shlwapi
StrRetToStrA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathAppendA
PathCreateFromUrlW
oleacc
CreateStdAccessibleObject
Sections
.text Size: 139KB - Virtual size: 271KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ