Static task
static1
Behavioral task
behavioral1
Sample
c2f6989583434ac36b3311f2257538c3.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c2f6989583434ac36b3311f2257538c3.exe
Resource
win10v2004-20240226-en
General
-
Target
c2f6989583434ac36b3311f2257538c3
-
Size
184KB
-
MD5
c2f6989583434ac36b3311f2257538c3
-
SHA1
852eeb8d1777ecee7a3dfd489d57a406cd7b3ad7
-
SHA256
c57dd4371272a196f69a89c15ce573f19b8128177b14ddeef16d0a265c4eab54
-
SHA512
29ce5562779a65c5bc7e275f06a5ce5dfdd54ae28f2c20ec40dce1cc2667e0beb3025d021bfa56c053bbd099c963102cf33f1ad2f7a4ec721372b096f2808d80
-
SSDEEP
3072:m8eiij97GaU0f+hAJgxe4N18cdhGiq46GlG+akQrwdAPphr3e3nV3S15ml4Xvicf:m8ei497Ga3+hAEe4NWehGz46qJaWahhR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2f6989583434ac36b3311f2257538c3
Files
-
c2f6989583434ac36b3311f2257538c3.exe windows:4 windows x86 arch:x86
221bbfafbac31d9c39b9c3054f44970b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateGuid
CoInitialize
CoCreateInstance
user32
wsprintfA
rpcrt4
UuidToStringA
shlwapi
SHEnumValueA
StrStrIA
SHSetValueA
SHEnumKeyExA
SHGetValueA
advapi32
RegOpenKeyExA
CryptGenRandom
OpenSCManagerA
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
CryptReleaseContext
RegCreateKeyExA
RegSetValueExA
RegCloseKey
CryptAcquireContextA
shell32
SHGetSpecialFolderPathA
msvcrt
isupper
printf
strlen
wctomb
__mb_cur_max
tolower
isxdigit
??2@YAPAXI@Z
isalpha
islower
isalnum
ispunct
isgraph
strerror
sprintf
strcat
strcpy
rand
memcmp
atoi
strncpy
wcscpy
mbstowcs
srand
time
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fopen
fclose
fwrite
memset
memcpy
malloc
free
isspace
imagehlp
ImageNtHeader
kernel32
CreateFileA
GetFileAttributesExA
GetLastError
ExitProcess
GetVersionExA
GetLocalTime
SleepEx
GetModuleHandleA
SetFileTime
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
lstrlenA
GetSystemDirectoryA
GetStartupInfoA
GetFileAttributesA
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE