Static task
static1
Behavioral task
behavioral1
Sample
c6cccdff96590cd845c90e635e48bb28.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6cccdff96590cd845c90e635e48bb28.exe
Resource
win10v2004-20240226-en
General
-
Target
c6cccdff96590cd845c90e635e48bb28
-
Size
60KB
-
MD5
c6cccdff96590cd845c90e635e48bb28
-
SHA1
a057470ebbf8201bfea271b1e402380912782a68
-
SHA256
c9707354b3e33beaab8e0790ec6a30f9c3723e4018e17c738b1d8183cc393cd1
-
SHA512
bc253c0551144502690d31dd128b73774883188f444fe7b93a18b46a3dda13adabef7a9529b9617ecd510babce195dc9cc853c3b3a3206b6d17d2cf86286971b
-
SSDEEP
1536:gQkhW4SG6WyIHQRt9k3PUX4BcWQX2oooD+AyxArDIVJ9:ChpSG6swRtbX4XQXMmDI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6cccdff96590cd845c90e635e48bb28
Files
-
c6cccdff96590cd845c90e635e48bb28.exe windows:4 windows x86 arch:x86
4cb46614cb4685657365f53eb7bba72a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
Sections
.MPRESS1 Size: 33KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE