Static task
static1
Behavioral task
behavioral1
Sample
cc77112c17e1e7c7f6ac95a6eed6e8b0.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cc77112c17e1e7c7f6ac95a6eed6e8b0.exe
Resource
win10v2004-20240226-en
General
-
Target
cc77112c17e1e7c7f6ac95a6eed6e8b0
-
Size
56KB
-
MD5
cc77112c17e1e7c7f6ac95a6eed6e8b0
-
SHA1
08b00611aac048b3997b062c246d51eabd4df480
-
SHA256
cc344644911a9eec2888aed9890cb8f25245f107976846ca87cce3cae04866b1
-
SHA512
da3a8bbd2e52d59d01281259b3e68c504cbf76514666f027b457475bf70cd48766c9a1092d31d138af6fab85f1af1c2756c9277aa3e329afc74858d7b24d32eb
-
SSDEEP
768:punujNspzIcdD6QmKGDBUVacBkGtsQGIj970xNnpwk+u0c1aGzGsTttmh:punuN4L6QO5GiQGa9IxRikD1aYlTC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc77112c17e1e7c7f6ac95a6eed6e8b0
Files
-
cc77112c17e1e7c7f6ac95a6eed6e8b0.exe windows:4 windows x86 arch:x86
3e34de8cec8d0546647a34ad4a471400
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
TerminateThread
GetFileSize
GetCurrentThreadId
SizeofResource
ReadProcessMemory
ResetEvent
CreateProcessW
SetThreadPriority
DeleteFileW
ReadFile
GetFileAttributesExW
VirtualAlloc
FindClose
LoadLibraryW
FindFirstFileW
GlobalLock
GetFileAttributesW
GetLogicalDrives
GetModuleHandleW
GlobalAddAtomW
WideCharToMultiByte
GetProcAddress
VirtualFree
GlobalFree
CreateWaitableTimerW
lstrlenW
GetLocalTime
SetEvent
FindResourceExW
lstrcpyW
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 838B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE