Static task
static1
Behavioral task
behavioral1
Sample
c66b9c1d94a249ca5cfb66952569154e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c66b9c1d94a249ca5cfb66952569154e.exe
Resource
win10v2004-20240226-en
General
-
Target
c66b9c1d94a249ca5cfb66952569154e
-
Size
164KB
-
MD5
c66b9c1d94a249ca5cfb66952569154e
-
SHA1
a2d8ac9218815b55a0ca75eff4b6bad6fb97f065
-
SHA256
270a83b9a1c045c5f62df48515438c6dc62e5f782d057830c7be662cf256a2c4
-
SHA512
1af7183c323fa507e973903b32f996f2b01c58c3133e8dcecfdcb516090e1848d2d663bb7e42f6e67da22444b1a025d00c7365b8931ec02e7af6533c0644db69
-
SSDEEP
3072:p5RZ+K5sn82WW6bIUx2HImAcLKcI3SR3UDQ26OQwEAGP:vRZ+KZ2Exc5A0Kd3S4Q26tPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c66b9c1d94a249ca5cfb66952569154e
Files
-
c66b9c1d94a249ca5cfb66952569154e.exe windows:4 windows x86 arch:x86
2973ddc18dcb13363e4a843495cb30fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
user32
CloseWindow
CharLowerBuffA
CreateWindowExA
wsprintfA
SetWindowLongA
advapi32
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegSetValueA
Sections
.text Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ