Static task
static1
Behavioral task
behavioral1
Sample
ccc8a3b39bcf290078285055347efc81.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccc8a3b39bcf290078285055347efc81.exe
Resource
win10v2004-20240226-en
General
-
Target
ccc8a3b39bcf290078285055347efc81
-
Size
3.4MB
-
MD5
ccc8a3b39bcf290078285055347efc81
-
SHA1
dc39b1c024661b5042330d39fac0d82e9b328bc8
-
SHA256
251667734d1007b915e747e4b276c1419da2d4b92d887e3f7bda43e65d389e5e
-
SHA512
49c1bf7482be1330ed8ad94fd105ca328df891e5cd25ae6d896a42626260984f1ab484adc98b1229f7a85bc36fa21688df54aada9755701cb5c0d21b6c9810ef
-
SSDEEP
98304:c3wcaz///uVX2VxLDvnYoN645QdKu4kay3k25or7Wp:b///u1yvnYoUvd4CUxPW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccc8a3b39bcf290078285055347efc81
Files
-
ccc8a3b39bcf290078285055347efc81.exe windows:4 windows x86 arch:x86
23d61467b7d278c157436d9b2ab7eaa5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcess
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetProcAddress
CloseHandle
TerminateProcess
UnhandledExceptionFilter
FreeLibrary
WideCharToMultiByte
HeapAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
WaitForSingleObject
GetProcessHeap
GetStdHandle
IsDebuggerPresent
ReadFile
SetEvent
GetACP
GetFileType
GetModuleHandleA
InitializeCriticalSection
FlushFileBuffers
TlsSetValue
CreateEventW
TlsAlloc
HeapSetInformation
WriteConsoleW
CreateThread
GetCPInfo
TlsFree
GetFileAttributesW
GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
SetStdHandle
FindNextFileW
DeleteFileW
VirtualAlloc
LocalAlloc
GetCommandLineA
SetEndOfFile
GetVersionExW
ReleaseMutex
GetFileSize
EncodePointer
GetModuleHandleExW
CreateDirectoryW
GetFullPathNameW
LoadResource
ExpandEnvironmentStringsW
user32
TranslateMessage
DispatchMessageW
ShowWindow
MessageBoxW
PostQuitMessage
SetWindowLongW
GetDlgItem
GetSystemMetrics
GetDC
PostMessageW
SetWindowPos
EnableWindow
IsWindow
LoadCursorW
GetParent
SetFocus
GetSysColor
BeginPaint
SetCursor
RegisterClassW
EnableMenuItem
GetWindow
GetWindowTextW
MessageBoxA
Sections
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ