Static task
static1
Behavioral task
behavioral1
Sample
c4266a705a4eb7456bf5df2df48a177a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4266a705a4eb7456bf5df2df48a177a.exe
Resource
win10v2004-20240226-en
General
-
Target
c4266a705a4eb7456bf5df2df48a177a
-
Size
252KB
-
MD5
c4266a705a4eb7456bf5df2df48a177a
-
SHA1
3fd9839c2b933cc84ba93f5f20be8f0c25e3ac4c
-
SHA256
c3c4257e97226c7df568855582da5f1cf081e3ee2b1043aa39cf0809851bc04f
-
SHA512
77ec02ab8d9f025b5af0a850995b8ff0d49b0cde7109fa974dcef962582040a646edeb6d833f89dd4ab4b15751afd5fb7db2982411ab65af6632140ede788df7
-
SSDEEP
6144:ea7GbgbZmOpOfwmmKAraBCDoeAPD4vDdy:eiGMoYOf5m7raBORy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4266a705a4eb7456bf5df2df48a177a
Files
-
c4266a705a4eb7456bf5df2df48a177a.exe windows:4 windows x86 arch:x86
97d0062ee40a69dd10a087b00adfa66d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 105KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 46KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE