Static task
static1
Behavioral task
behavioral1
Sample
c54c8e3e2a91eaf0a6320d6b9fc4126b.exe
Resource
win7-20240221-en
General
-
Target
c54c8e3e2a91eaf0a6320d6b9fc4126b
-
Size
276KB
-
MD5
c54c8e3e2a91eaf0a6320d6b9fc4126b
-
SHA1
f96132af1fe6abd29cae5e358214263873ad799f
-
SHA256
6052567b33ec697f94b06c004783e4a325adf0d91595683ab7e31afecf6c6a77
-
SHA512
fe9aba273d64abf32db90f34006bd549c716a80ca0fc3d5afdbacc1a4c79a972a8405ee3b7f3ddf60c4f55caf77074229fff23def739a2ed9cb5d00e7116ef64
-
SSDEEP
6144:mtwMSy1MS1a4z6voCgwXlJruPrD3/NiGzDFk:mSMV/uawVJgD3liGDF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c54c8e3e2a91eaf0a6320d6b9fc4126b
Files
-
c54c8e3e2a91eaf0a6320d6b9fc4126b.exe windows:4 windows x86 arch:x86
8b3a8724bf7ba05b1e4f7bae0b62c920
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleFileNameA
GlobalAddAtomW
IsBadWritePtr
SetConsoleCtrlHandler
SetFilePointer
FatalAppExitA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapReAlloc
WideCharToMultiByte
HeapCreate
SetUnhandledExceptionFilter
VirtualFree
EnumResourceNamesA
SetHandleCount
GetFileType
GetACP
GetEnvironmentVariableA
GetStartupInfoA
UnhandledExceptionFilter
GetStdHandle
IsBadCodePtr
WriteFile
GetCPInfo
GetDateFormatW
IsBadReadPtr
GetOEMCP
HeapDestroy
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetCurrentThread
user32
SetTimer
EnumWindows
MessageBoxA
CharUpperA
LoadStringA
DispatchMessageA
CharNextA
KillTimer
GetWindowTextA
GetMessageA
PeekMessageA
IsWindowVisible
GetWindowThreadProcessId
PostThreadMessageA
wsprintfW
wsprintfA
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 144KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ