Static task
static1
Behavioral task
behavioral1
Sample
c4019dacc13e5d308d9427becfbe1884.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4019dacc13e5d308d9427becfbe1884.exe
Resource
win10v2004-20240226-en
General
-
Target
c4019dacc13e5d308d9427becfbe1884
-
Size
44KB
-
MD5
c4019dacc13e5d308d9427becfbe1884
-
SHA1
a26eef99a3242c8b3fbc31037ee46e644442b936
-
SHA256
fba369ab9f34dfc8adfff567aab515fbb86b95d66ae2de68b7df9e086ada49fd
-
SHA512
fadf230a3193ef2be4a5c320a9ba523fbe853f578655e5cdd4d349a69dd5e50ebb4cd3306321f7e953159ae778b92ee66966df0f87de3c969b899011e384d595
-
SSDEEP
768:kyodQYKwRcwy/IY2UMWr16kV8WpBh+6G5oJM8wtZTK5K6T9SnW6:kyodhK8Y/0U3r16kVjpBsL5oJreNK5K7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4019dacc13e5d308d9427becfbe1884
Files
-
c4019dacc13e5d308d9427becfbe1884.exe windows:5 windows x86 arch:x86
fdd9823681856beac175edddbf8eb58a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorW
GetCursorPos
kernel32
CreateFileMappingW
Sections
.dehwv Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wpsr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mhkjyb Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ