Static task
static1
Behavioral task
behavioral1
Sample
cc589727d0f4c21ed147253ec42e6f48.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc589727d0f4c21ed147253ec42e6f48.exe
Resource
win10v2004-20240226-en
General
-
Target
cc589727d0f4c21ed147253ec42e6f48
-
Size
49KB
-
MD5
cc589727d0f4c21ed147253ec42e6f48
-
SHA1
837d85af11db7f739544a97f4d9cd924e3a9c7ef
-
SHA256
afd847830be53a40f06274aae0ba186e30e51a24705e2b0e2a82b4e53982243c
-
SHA512
a86a30a64d53cadcc990cf0914ccf86f1dd127a13a03e014dfb9c4b27a31ff13b6c71598e5d838e6bfe70b0fea370876defbe3018577b626c4f6ce8f09b8a09a
-
SSDEEP
768:2OhBv7nnXisyWb3jiHcXpNs/ZBiz33mpIZAaq/Gyvg74hOp3O:2OhBjSmzi8LmyqaqbsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc589727d0f4c21ed147253ec42e6f48
Files
-
cc589727d0f4c21ed147253ec42e6f48.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE