Static task
static1
Behavioral task
behavioral1
Sample
ccc5d28cc295de749ea35d9bef32379a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccc5d28cc295de749ea35d9bef32379a.exe
Resource
win10v2004-20240226-en
General
-
Target
ccc5d28cc295de749ea35d9bef32379a
-
Size
132KB
-
MD5
ccc5d28cc295de749ea35d9bef32379a
-
SHA1
e4a023445087fc243372b1bc9cc9977078951d33
-
SHA256
8e4464c7570219e2b5cbe144e6fb6d7316b401d5420b0f611030c81e544f68a1
-
SHA512
af5aa586b503cb49b49cf7a4873d129f72a3abb1018941f5469f129fd40ca071fe1857acebc17c8c728599ea2944167d92a6c84b4261d6e8491ab459203f4a2c
-
SSDEEP
3072:F9HdO4JeL34hofphg/WR8OaWHb25xPEWOmnxuGqk:/I4c6o0WZan5xPEWjnxuGq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccc5d28cc295de749ea35d9bef32379a
Files
-
ccc5d28cc295de749ea35d9bef32379a.exe windows:4 windows x86 arch:x86
549015c74d5daf0cfb806e7333d3bf08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetProcessAffinityMask
IsBadWritePtr
ContinueDebugEvent
LCMapStringA
GetStdHandle
GetUserDefaultUILanguage
FileTimeToSystemTime
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
data Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ