Static task
static1
Behavioral task
behavioral1
Sample
c95dbd726b0017a9f090524cc8caf67d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c95dbd726b0017a9f090524cc8caf67d.exe
Resource
win10v2004-20240226-en
General
-
Target
c95dbd726b0017a9f090524cc8caf67d
-
Size
76KB
-
MD5
c95dbd726b0017a9f090524cc8caf67d
-
SHA1
0242604209f6808962676fa3e11792dfdd74cc50
-
SHA256
9bfe2bd00c1ce33a6a7a4e9df301171ad4067f85803bf35701f6b3cffb9235b8
-
SHA512
800d8e38eac48163271eb768278f06bbccbfe56add1d8ad57b9b758204410617fb0ae223c8c553db706dc723bfa9117966036c859a7bf9bba16f9de45cc050f3
-
SSDEEP
1536:HNrGvhM+XeXCuMbjAb3mcRypQkAQF2p2wjl:HaXXekHAKYyKkTi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c95dbd726b0017a9f090524cc8caf67d
Files
-
c95dbd726b0017a9f090524cc8caf67d.exe windows:4 windows x86 arch:x86
fed4692720d33e68436de052d48e29d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetCPInfo
GetConsoleMode
GetComputerNameA
OpenFile
CreateProcessA
ReadConsoleA
DeleteAtom
ExitThread
WriteFile
CreateDirectoryA
Sleep
FindAtomA
GetCommandLineA
GetStdHandle
CopyFileExA
ReadConsoleA
CreateThread
CopyFileW
ReadFile
GetLastError
DeleteAtom
ExitThread
WriteFile
GetFileSize
GetComputerNameA
CreateProcessA
OpenFileMappingA
GetComputerNameA
GetLastError
GetFileSize
FindAtomA
OpenFileMappingA
GetStdHandle
DeleteFileW
ExitThread
CopyFileW
CreateProcessA
CopyFileExA
WriteFile
DeleteFileA
CreateThread
Sleep
GlobalFree
CreateProcessA
OpenFileMappingA
DeleteFileA
CopyFileA
GetFileTime
SetLastError
FindFirstFileA
GetFileSize
GetLastError
DeleteFileW
GetComputerNameA
OpenFile
CreateThread
FindAtomA
CreateDirectoryA
SetLastError
Sleep
ReadFile
CopyFileExW
GlobalFree
OpenFileMappingA
OpenFile
DeleteFileA
GetCPInfo
GetConsoleMode
GetLastError
DeleteAtom
GetComputerNameA
GetFileTime
GetCommandLineA
GetFileSize
CopyFileW
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mvdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ