Static task
static1
Behavioral task
behavioral1
Sample
c5c3cd3f5cb04bfbff46f5442832e4be.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5c3cd3f5cb04bfbff46f5442832e4be.exe
Resource
win10v2004-20240226-en
General
-
Target
c5c3cd3f5cb04bfbff46f5442832e4be
-
Size
83KB
-
MD5
c5c3cd3f5cb04bfbff46f5442832e4be
-
SHA1
26734d6b3fc32a888aac043dd9bad881abc64b16
-
SHA256
0034a063c80aa5265b976d815d2864ec1d5550afc7e4ea6140e60ed265de2a88
-
SHA512
c370a18bc27a2befbee11364b69b296984c261fb9ec79f3be69dc0de32728614ce98ce3383707ebd7f85bac84c03a07419077ee725110f53e491a14ce609b6dd
-
SSDEEP
1536:ly/eesXycdBWwhl89Z7tDXT8c90hghuhVdEjEErxTWDTMqhGKYIZTET8bDQ:svsXylSlmZ7tD7CGkCjBkMqhGKZTbbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5c3cd3f5cb04bfbff46f5442832e4be
Files
-
c5c3cd3f5cb04bfbff46f5442832e4be.exe windows:4 windows x86 arch:x86
52c35fd80d763db14c960de1e6094055
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
SetVolumeLabelW
CancelTimerQueueTimer
SetTimeZoneInformation
GetSystemWindowsDirectoryA
TzSpecificLocalTimeToSystemTime
LZCopy
ResetEvent
ClearCommBreak
GetCommProperties
ReadConsoleInputExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE