Static task
static1
Behavioral task
behavioral1
Sample
ccf3d2e8c14d87cafd4cac74e5719adf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccf3d2e8c14d87cafd4cac74e5719adf.exe
Resource
win10v2004-20240226-en
General
-
Target
ccf3d2e8c14d87cafd4cac74e5719adf
-
Size
27KB
-
MD5
ccf3d2e8c14d87cafd4cac74e5719adf
-
SHA1
159d46a039c5172a5c411a56aeac791e5c989f8b
-
SHA256
dbf92a45a917bbc78686a1c64464d1bf3bb07ae2061a8b052518a79382e2ffbb
-
SHA512
234c63852ec63c19204f19465bae83ebf8b461b8fe0f1d2f400ef67435a88c4cb9593cd03507d9456726a1c2860fe6730a620b951103f13cdd3af80734ed5c6f
-
SSDEEP
768:x3Vgr0cOLPSuiPNaEWs0oXDUswpcZhA/kBcG:m0vL6HaEWcDUNcch
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccf3d2e8c14d87cafd4cac74e5719adf
Files
-
ccf3d2e8c14d87cafd4cac74e5719adf.exe windows:3 windows x86 arch:x86
de95250cf53a971056951e748a573b5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
OpenSCManagerA
CreateServiceA
DeleteService
OpenServiceA
StartServiceA
ControlService
CloseServiceHandle
kernel32
GetLastError
CloseHandle
CreateFileA
GetVersion
GetEnvironmentStrings
GetCommandLineA
GetCurrentDirectoryA
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetFileType
GetStartupInfoA
GetProcessHeap
WriteFile
HeapAlloc
HeapFree
WideCharToMultiByte
FlushFileBuffers
SetFilePointer
SetStdHandle
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 838B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 730B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ