Static task
static1
Behavioral task
behavioral1
Sample
cc0edbf50acfa51d330c13d2ad6f4434.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc0edbf50acfa51d330c13d2ad6f4434.exe
Resource
win10v2004-20240226-en
General
-
Target
cc0edbf50acfa51d330c13d2ad6f4434
-
Size
50KB
-
MD5
cc0edbf50acfa51d330c13d2ad6f4434
-
SHA1
84bf46a62d438ad4a64d1f12171acd4e158d87b0
-
SHA256
7d59d00a3e2eae2891a304a8360ac36a74ed6d6539010871465fa68f87a15cc2
-
SHA512
81886efbfeb84940186407e9b9146958cfaa941174c8e7288691a6497a20d0069c48f604976f4456a82bf642c238b177d9a00a633905e2858ee8191b3db6e93d
-
SSDEEP
768:C8Mb9sU4+Vya5Wk7Fy3hJ0RYKebw+5a4+BrGZ+Fi6TBL7y38MQvJ9Fm8sdE7:7Ix4w1vFGhJ0qKAw8+MUZTBXysMQUfd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc0edbf50acfa51d330c13d2ad6f4434
Files
-
cc0edbf50acfa51d330c13d2ad6f4434.exe windows:4 windows x86 arch:x86
7c8750e03ef3c7ddf04fc81f8f1fa04f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar
user32
CharNextW
GetSubMenu
LoadStringW
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 45KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ