Static task
static1
Behavioral task
behavioral1
Sample
cc01688ab8ca96bc779ea506f020ed76.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc01688ab8ca96bc779ea506f020ed76.exe
Resource
win10v2004-20240226-en
General
-
Target
cc01688ab8ca96bc779ea506f020ed76
-
Size
64KB
-
MD5
cc01688ab8ca96bc779ea506f020ed76
-
SHA1
3a5a83aaaa6993f84f0b0649dfdaa9245be015d6
-
SHA256
479f4c9463ca8ae1e11c22f8eb95a34653e33668eb7d6979f807c6f57a745afa
-
SHA512
5656ee86cfbf04fdfc369a33526a7dfa39432f354bf68b1c14d4a78771e3261ff2959d9e919d03370055a906c0079095b2ba38526c93419dde6190934c76a1d0
-
SSDEEP
384:tKr0lgz3FwfdFX1kR+Si4wL8UjRA/VuuLOM8VvxfxspeLw8joyQx67gAyirWmyQ:t9gz3uVMRlUjRMuWx8nfxLM2VlsAhar
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc01688ab8ca96bc779ea506f020ed76
Files
-
cc01688ab8ca96bc779ea506f020ed76.exe windows:5 windows x86 arch:x86
5fa218e699b3c29126dd535f6093e105
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetStartupInfoA
GetProcessHeap
LoadLibraryA
GetModuleHandleA
VirtualAlloc
advapi32
RegOpenKeyA
RegOpenKeyW
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ati1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ati5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ati2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ati3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ati4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ati6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 454B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ