Static task
static1
Behavioral task
behavioral1
Sample
c353773804f845775e7482b8892acf6e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c353773804f845775e7482b8892acf6e.exe
Resource
win10v2004-20240226-en
General
-
Target
c353773804f845775e7482b8892acf6e
-
Size
324KB
-
MD5
c353773804f845775e7482b8892acf6e
-
SHA1
6815df9850530d0c57a3dd378bcab2bd5f228dd6
-
SHA256
ba123d06c8ce74d85a5bf364372e0642b6cd3043f88a83b875620af85d8d0ccd
-
SHA512
e509ab5aebd1eb7931db458791477f11de5ab405178a5594ce933ffa451dd073561d16386da58ff00afe8552f93da5f16568aaab8ac56675ae668b2d68a69bba
-
SSDEEP
6144:JU6TvOFAAvb5rnGI1kVzTo8/+OGg7+JHK/QN6MS/XcDrDf:6UGFfbdr1kVv/9Gg7d/Qt02rDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c353773804f845775e7482b8892acf6e
Files
-
c353773804f845775e7482b8892acf6e.exe windows:4 windows x86 arch:x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 192KB - Virtual size: 566KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE