Static task
static1
Behavioral task
behavioral1
Sample
cd6180130e157978b4b0516d25d8f43791e2b55e3198112c9a39e59a72ff8ee8.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cd6180130e157978b4b0516d25d8f43791e2b55e3198112c9a39e59a72ff8ee8.exe
Resource
win10v2004-20240226-en
General
-
Target
cd6180130e157978b4b0516d25d8f43791e2b55e3198112c9a39e59a72ff8ee8
-
Size
172KB
-
MD5
540376d8dde12a3380d1559e34510582
-
SHA1
d314ae8e7bc55e6c2e8ed6c1c91e8f0cd21ee34c
-
SHA256
cd6180130e157978b4b0516d25d8f43791e2b55e3198112c9a39e59a72ff8ee8
-
SHA512
2dca8c303f0afe0438069f7953e15210d30ee1388dc0a89acb7dc4b18730b0f78feceb973909a06ba2c2f6e8de3ae6553a67ea989ad23bace5ef1e9d069f3ae0
-
SSDEEP
3072:S2qTc8JsfA/rpTeieAp0jVMz52M7I2yOUXjbF3dz8mrvX54Iu:SvTc8J0WpTedSz5dc2yOUTxFnrvX54V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd6180130e157978b4b0516d25d8f43791e2b55e3198112c9a39e59a72ff8ee8
Files
-
cd6180130e157978b4b0516d25d8f43791e2b55e3198112c9a39e59a72ff8ee8.exe windows:4 windows x86 arch:x86
c9af8465d88052c518dd22ea7667e677
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetOEMCP
GetStartupInfoW
VirtualAlloc
LocalAlloc
ExitProcess
WriteFile
SetFilePointer
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineW
GlobalFree
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetStartupInfoA
InterlockedExchange
VirtualQuery
GetSystemInfo
SetStdHandle
GetLocaleInfoW
FlushFileBuffers
Sleep
ExitThread
WaitForSingleObject
GetACP
lstrcatW
MulDiv
_lclose
CreateFileW
user32
GetSystemMetrics
LoadIconA
advapi32
RegOpenKeyA
RegQueryValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegDeleteValueW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
Sections
.text Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ