Static task
static1
Behavioral task
behavioral1
Sample
c580f29f2df9a56a3b1aa3d5520b98a6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c580f29f2df9a56a3b1aa3d5520b98a6.exe
Resource
win10v2004-20240226-en
General
-
Target
c580f29f2df9a56a3b1aa3d5520b98a6
-
Size
171KB
-
MD5
c580f29f2df9a56a3b1aa3d5520b98a6
-
SHA1
c008f6814aa12576d1d4acf2d47a166d9736f667
-
SHA256
105ff7f21600d72f70e1d4d0ee229b6b44719a647c5389f6eb05f18c9bff2fc7
-
SHA512
ec80320ee73496559204aa71fd57a385b582705978b41b93f11d960bc05149e296b29378b9278c5a89affed8ae4634983094a79b899213c2aa7a14d0954f91ee
-
SSDEEP
3072:hdgso+LdB4dZlZR6aw/fw4qkthwK+pMPMrNtscYUUfSMaePZ:hdbo+sdZlZRiqkt5+pcaIbwMDZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c580f29f2df9a56a3b1aa3d5520b98a6
Files
-
c580f29f2df9a56a3b1aa3d5520b98a6.exe windows:4 windows x86 arch:x86
34d3c62bdcac0aabe38b28aa055f96c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
_vsnwprintf
__setusermatherr
_vsnprintf
exit
memset
_XcptFilter
__getmainargs
__set_app_type
_ismbblead
__p__commode
__p__fmode
?terminate@@YAXXZ
_exit
_amsg_exit
_cexit
_acmdln
_controlfp
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
RaiseException
AddAtomW
GetVersionExA
TlsFree
GetCurrentProcess
CloseHandle
GetComputerNameA
GetStdHandle
GetCommandLineA
SetHandleCount
GetFileType
GetCurrentThread
GetStartupInfoA
GetModuleHandleW
TlsAlloc
SetLastError
EnumResourceNamesA
GlobalMemoryStatus
TerminateProcess
HeapAlloc
GetDiskFreeSpaceA
GetSystemTimeAsFileTime
GetTickCount
OutputDebugStringW
GetVersion
RtlUnwind
TlsGetValue
GetModuleFileNameA
TlsSetValue
GetLocalTime
SetUnhandledExceptionFilter
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
DeviceIoControl
HeapFree
InterlockedExchange
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ