Static task
static1
Behavioral task
behavioral1
Sample
c9274b0ac0aec03475d903a34042ee26.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9274b0ac0aec03475d903a34042ee26.exe
Resource
win10v2004-20240226-en
General
-
Target
c9274b0ac0aec03475d903a34042ee26
-
Size
207KB
-
MD5
c9274b0ac0aec03475d903a34042ee26
-
SHA1
e696f8cf053a3b87b3da8d0715d4fe268171416c
-
SHA256
71907a87b9900962e715bb3e85a87e8b075f7dcaa621720325fab35fee837ff2
-
SHA512
06d35b8ecfbedb4b4b01c90b83836f453d503bb4f0e1858c042c3a1fe1436837eaa69b0f71401d600d211fb2d2cce67558da525ff777d1c6e6d4b23745a5fd70
-
SSDEEP
3072:VgltMA6Lkwhbdy/cIPaYnWmSYpmsG28ii4boaRnMvUVYyQNn9dNQ:vA6wwhpykMnWmUszjXoaRnuUXu9d+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9274b0ac0aec03475d903a34042ee26
Files
-
c9274b0ac0aec03475d903a34042ee26.exe windows:4 windows x86 arch:x86
f5a68f950a9baeee6cbfa8a3fd7ca99e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetModuleHandleA
GetLastError
GetCommandLineA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
gdi32
SelectObject
CheckColorsInGamut
GetObjectA
DeleteObject
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE