Static task
static1
Behavioral task
behavioral1
Sample
c4c6d0569b645c28bbdc14e1e52b03ab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4c6d0569b645c28bbdc14e1e52b03ab.exe
Resource
win10v2004-20240226-en
General
-
Target
c4c6d0569b645c28bbdc14e1e52b03ab
-
Size
75KB
-
MD5
c4c6d0569b645c28bbdc14e1e52b03ab
-
SHA1
39d385d0b30b4d031233ad70fb8e6aa1085cb85e
-
SHA256
4fb3a1e16ed1aff2a4c44297f1cc9212dd47467fd7471ef91aa83b000a6bbf5c
-
SHA512
8b0fe4f49bf613b0b0e4bb598b50bf9a0640f2d6fd7e3a0a758ec8fd4aca1401bf83c72c01e5a81897163f35701ad22db07571080af9963f03e2c2e11d9809e1
-
SSDEEP
768:2f5XF64U3FAquCx/ZTHL7BkhOhH07lDQIJf7X3Utbg061f6FGBgIguxfu+2noIIF:2f5X8jw9QkUtbG1fzgxuxu7CwOhoR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4c6d0569b645c28bbdc14e1e52b03ab
Files
-
c4c6d0569b645c28bbdc14e1e52b03ab.exe windows:4 windows x86 arch:x86
15768490c604f0028b17f1bc808d67e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
MultiByteToWideChar
VirtualAlloc
VirtualQuery
WideCharToMultiByte
user32
GetClassInfoExA
LoadIconA
RegisterClassExA
DialogBoxParamA
MessageBoxA
SetWindowTextA
IsWindow
SendMessageA
KillTimer
GetDlgItem
EnableWindow
EndDialog
PostMessageA
comctl32
InitCommonControlsEx
comdlg32
GetSaveFileNameA
avicap32
capCreateCaptureWindowA
msvfw32
ICSendMessage
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ