Static task
static1
Behavioral task
behavioral1
Sample
c4ace3da8a4e1ceac745127828011832.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4ace3da8a4e1ceac745127828011832.exe
Resource
win10v2004-20240226-en
General
-
Target
c4ace3da8a4e1ceac745127828011832
-
Size
54KB
-
MD5
c4ace3da8a4e1ceac745127828011832
-
SHA1
d10b67fd3f23762a67cb2342d8f1620543358949
-
SHA256
673fa316c80148777a60ca8bc78fbfed61a42f7048f50003cb4d9d348e9f349f
-
SHA512
ca69c6917006179317efed95ad82bb35f218b03b58950306c5244a3b635ea5dc5292af8416025b921273b37d35e670dce73bdf6deef5d73fd90d9b72e3758a97
-
SSDEEP
768:CJvM9MCPEZPe3NYNbaiYroPrPAKGqDhp43x3EhUExphhKOgyn4PWW:yk9jS8iaqL8qN232q4Pk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4ace3da8a4e1ceac745127828011832
Files
-
c4ace3da8a4e1ceac745127828011832.exe windows:1 windows x86 arch:x86
d5e01945b18766c65266791a1be4ab5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
MessageBoxA
crtdll
_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
wcslen
wctomb
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 608B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 784B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE