Static task
static1
Behavioral task
behavioral1
Sample
cf3a28df3cd2682651ced75c40b06155.exe
Resource
win7-20240221-en
General
-
Target
cf3a28df3cd2682651ced75c40b06155
-
Size
245KB
-
MD5
cf3a28df3cd2682651ced75c40b06155
-
SHA1
df85d8f256b8fd779d660f633eca94a7ea6c3cea
-
SHA256
3357b4a89dc623781355fe7a673329975777b2a5ce8a2051c538dcb7d4969c8e
-
SHA512
89c8d75516d889c8993abe926ddf5713e4fe207d459dafffa01d90df01e7f7fea63ffa0ca7428d15b0940f01c9290706c776b0b2461e160cebe2eb23a097b3b5
-
SSDEEP
6144:Na/djfLqZHNlXeQN/TezMUpyXVG71CRdzf:XfnNQpB8zf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cf3a28df3cd2682651ced75c40b06155
Files
-
cf3a28df3cd2682651ced75c40b06155.exe windows:6 windows x86 arch:x86
b89f3af6e8726c625cba8a18b46cbaf3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetDefaultIMEWnd
normaliz
IdnToNameprepUnicode
IdnToUnicode
shlwapi
PathStripPathA
StrStrIA
PathAddExtensionW
kernel32
VerLanguageNameA
GetConsoleWindow
IsValidLocaleName
VirtualProtect
QueryPerformanceCounter
GetUserDefaultLangID
OutputDebugStringA
CreateTapePartition
pdh
PdhGetCounterTimeBase
PdhVbGetCounterPathElements
PdhSelectDataSourceA
PdhVbCreateCounterPathList
PdhFormatFromRawValue
winmm
midiOutGetID
midiInClose
joyReleaseCapture
DriverCallback
joyGetDevCapsA
PlaySoundA
rtutils
RouterAssert
LogErrorW
TracePutsExW
MprSetupProtocolFree
TraceVprintfExA
TraceDeregisterA
RouterGetErrorStringW
wsnmp32
ord504
ord902
ord107
ord400
ord200
ord104
user32
GetWindowContextHelpId
SetClipboardViewer
ShowWindow
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ