Static task
static1
Behavioral task
behavioral1
Sample
c9c84956dc9c7027bc7d3cdc27a7c473.exe
Resource
win7-20240221-en
General
-
Target
c9c84956dc9c7027bc7d3cdc27a7c473
-
Size
276KB
-
MD5
c9c84956dc9c7027bc7d3cdc27a7c473
-
SHA1
325729310a60b38af55ab5205420f3b1f411f80b
-
SHA256
38f7a5aac703aaf6efb66d2e1c945cb80623bdf5f999d9906f53978a47abefce
-
SHA512
c493dad69a72cd04bda30026f8cc607cc3681f759f52547d4e2ea6eda7b0b7b6e2065da91b19c0e611dd0b40bbb8518f9fc97b2ec289be847e8f87f24e8382b8
-
SSDEEP
6144:v/KJF9LNRXmuURQ6/4e0Lkb3jUm7ARmlSD6o5GRbPy6lrx+:v/6F9NJ3ZOkLg1URmw9u2mY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9c84956dc9c7027bc7d3cdc27a7c473
Files
-
c9c84956dc9c7027bc7d3cdc27a7c473.exe windows:4 windows x86 arch:x86
0568381e3bdf1e96bb43db029fec4ea2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetAtomNameA
LoadLibraryA
ResetEvent
GetCurrentProcessId
GetSystemInfo
SetEvent
HeapAlloc
VirtualFree
GetTempPathA
Sleep
GetProcAddress
LocalFree
SetFilePointer
SystemTimeToTzSpecificLocalTime
HeapFree
EnumResourceTypesW
CompareFileTime
GetEnvironmentVariableA
WriteFile
GetSystemDirectoryW
CreateThread
GetCurrentProcess
GetSystemTime
OpenEventA
SystemTimeToFileTime
CreatePipe
oleacc
LresultFromObject
CreateStdAccessibleObject
CreateStdAccessibleProxyW
newdev
UpdateDriverForPlugAndPlayDevicesW
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ