Static task
static1
Behavioral task
behavioral1
Sample
cd305a6f493d1f135c4cdfa9479f68ac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd305a6f493d1f135c4cdfa9479f68ac.exe
Resource
win10v2004-20231215-en
General
-
Target
cd305a6f493d1f135c4cdfa9479f68ac
-
Size
172KB
-
MD5
cd305a6f493d1f135c4cdfa9479f68ac
-
SHA1
15379665ac2a9cda072bb7f727c3b639168aef82
-
SHA256
f93df1ae8265b595223731ed98605304247a8f44be6365d44e64406d7f704296
-
SHA512
97024afb68773ac67ad2f74213cbdb701d177bb925426bc26c0bf2573e791fe151ef88ef6ea8daae5bef1201607c0d3fe7665d760d3330417f399e2fc2d170f8
-
SSDEEP
3072:bAVmTjH6qO31MKSabRVPJ7YzmEIRAAaNac9lxi9LebcP+HeoylQ/eK5kb:kVmXHaucNVP9p3laNG1fY5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd305a6f493d1f135c4cdfa9479f68ac
Files
-
cd305a6f493d1f135c4cdfa9479f68ac.exe windows:4 windows x86 arch:x86
eef54689ea58cc73219e0eac62c6528e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
LocalAlloc
GetVersionExA
DeviceIoControl
GetFileSizeEx
GetEnvironmentVariableA
MoveFileExA
SetCalendarInfoA
InterlockedExchange
GetTempPathA
GetCurrentProcess
GetFileAttributesExA
GetConsoleAliasesLengthW
GetVersion
ReadFileEx
IsProcessorFeaturePresent
GetModuleHandleA
GetConsoleCursorMode
GetDiskFreeSpaceExA
OpenProcess
IsBadStringPtrA
SetFilePointer
ReadConsoleA
GlobalFindAtomA
SetFirmwareEnvironmentVariableA
FreeEnvironmentStringsA
SetFileValidData
VirtualAlloc
TerminateProcess
GetComputerNameA
SetConsoleInputExeNameA
HeapDestroy
SetConsoleCursorPosition
wininet
InternetOpenW
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetSetOptionW
HttpQueryInfoA
InternetConnectA
Sections
.data Size: - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 156KB - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ