Static task
static1
Behavioral task
behavioral1
Sample
c630cc8965fdeb42ddf049f8ae6fa0ee.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c630cc8965fdeb42ddf049f8ae6fa0ee.exe
Resource
win10v2004-20240226-en
General
-
Target
c630cc8965fdeb42ddf049f8ae6fa0ee
-
Size
3.5MB
-
MD5
c630cc8965fdeb42ddf049f8ae6fa0ee
-
SHA1
5867bb0b8d25f7fff1263805254581c1441a8684
-
SHA256
2977bcbf52bb1fa261757db8611c50a5a486702bca3100b34f695564fc1d80a6
-
SHA512
f6bc985e4be6de29aa43308bcd4fb12cf59189cde27361d10cea5ec9d3386b24fe73ac91b63374fc390e9ae00eb040aa4b80345b02f41b377216836956b0fe33
-
SSDEEP
49152:sHdweNsbN36Oeutx8gdIMg8MHcrWSNW/tXhsKb1A6k5yHywT2YlyAmV7+gMhyyuq:mIl6DK8P7lxhsKGcSwT2YlhOehbV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c630cc8965fdeb42ddf049f8ae6fa0ee
Files
-
c630cc8965fdeb42ddf049f8ae6fa0ee.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 408KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.1MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE