Static task
static1
Behavioral task
behavioral1
Sample
cc9c9b2f80ffdb38f310e84491190959.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc9c9b2f80ffdb38f310e84491190959.exe
Resource
win10v2004-20240226-en
General
-
Target
cc9c9b2f80ffdb38f310e84491190959
-
Size
482KB
-
MD5
cc9c9b2f80ffdb38f310e84491190959
-
SHA1
b9c79bdb5f10c9681b17a778954db99bfca6633c
-
SHA256
8236973f218c431e2edd995d7819a9f8b52bfa87ec3005ec295b7d4c589eb024
-
SHA512
b6d751475c7dbe9708c3250c42a371463d7bacafb4a34af4532d1f65d9828b91e5cab2956e10cec37d7d4c47da9d062a837da40ef42c229224e6de219674462a
-
SSDEEP
6144:mThZLSATfVJFcWZT87qfkxedLsRmRMElKDRbT/9RE4QS7w19ta32Jhef3ecfCGBK:4hTfGqT82JMElqUAc1/aAiuKC9X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc9c9b2f80ffdb38f310e84491190959
Files
-
cc9c9b2f80ffdb38f310e84491190959.exe windows:4 windows x86 arch:x86
c34a78a95632fb452b7ce07054a51df2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateColorSpaceW
SetICMProfileA
DPtoLP
SetGraphicsMode
GetMiterLimit
CreateSolidBrush
gdiPlaySpoolStream
CreateScalableFontResourceA
CreateDiscardableBitmap
DeleteDC
UpdateColors
GdiFlush
SwapBuffers
GetEnhMetaFileBits
CreatePolyPolygonRgn
SetBitmapBits
CreatePatternBrush
InvertRgn
GetObjectType
GetLogColorSpaceW
EnumObjects
wininet
GopherGetAttributeA
GopherFindFirstFileA
InternetGetConnectedStateExA
FtpGetCurrentDirectoryW
FtpGetFileW
InternetSetDialStateA
kernel32
GetModuleFileNameA
GetSystemInfo
IsValidLocale
IsBadWritePtr
GetLocaleInfoW
SetStdHandle
LCMapStringA
GetCurrentThread
TlsAlloc
SetLastError
FreeEnvironmentStringsA
GetStringTypeA
EnumSystemLocalesA
OpenMutexA
LeaveCriticalSection
LoadModule
GetTimeZoneInformation
TerminateProcess
CompareStringW
GetUserDefaultLCID
VirtualAlloc
MultiByteToWideChar
CommConfigDialogA
FindFirstFileA
GetEnvironmentStringsW
GetCPInfo
GetCommandLineA
FreeEnvironmentStringsW
lstrcmpiW
WriteFile
GetLocaleInfoA
GetProcAddress
ReadConsoleOutputA
HeapCreate
GetEnvironmentStrings
SetCriticalSectionSpinCount
HeapFree
LCMapStringW
EnterCriticalSection
VirtualProtect
GetModuleHandleW
TlsSetValue
GetModuleHandleA
SetFilePointer
HeapDestroy
GetVersionExA
GetACP
GetStartupInfoA
UnhandledExceptionFilter
TlsGetValue
GetCurrentProcessId
GetOEMCP
GetFileType
DeleteCriticalSection
CloseHandle
GetDateFormatA
CompareStringA
GetStringTypeW
CreateMutexA
FlushFileBuffers
GetTimeFormatW
FindFirstFileExA
IsValidCodePage
GetTickCount
SetHandleCount
GetStdHandle
GetSystemTimeAsFileTime
TlsFree
HeapSize
GetTimeFormatA
GetCurrentThreadId
QueryPerformanceCounter
VirtualFree
HeapReAlloc
InterlockedExchange
ExitProcess
VirtualQuery
HeapAlloc
GetLastError
InitializeCriticalSection
GetCurrentDirectoryW
EnumResourceNamesA
ReadFile
LoadLibraryA
WideCharToMultiByte
SetEnvironmentVariableA
GetCurrentProcess
RtlUnwind
MoveFileW
user32
GetDlgItemInt
SetWindowPos
MessageBeep
IsCharUpperA
AnyPopup
DlgDirListComboBoxA
CallMsgFilterW
ChangeMenuW
RegisterClassA
RegisterClassExA
DdeNameService
AttachThreadInput
PostQuitMessage
GetCaretPos
RegisterWindowMessageA
SetWindowTextA
GetClipboardViewer
RegisterDeviceNotificationA
MsgWaitForMultipleObjects
IsDialogMessage
SetProcessWindowStation
InsertMenuA
GetWindowRgn
comctl32
InitCommonControlsEx
Sections
.text Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ