Static task
static1
Behavioral task
behavioral1
Sample
cd481a0611ba35b93b72e2b756b2f441.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cd481a0611ba35b93b72e2b756b2f441.exe
Resource
win10v2004-20240226-en
General
-
Target
cd481a0611ba35b93b72e2b756b2f441
-
Size
158KB
-
MD5
cd481a0611ba35b93b72e2b756b2f441
-
SHA1
8dba704ae8d721458a154b8bb7b875f332212f24
-
SHA256
7d45ae5010d1a492485e4958102dd9ae05075b7bb4c974c643bb21e7770907fd
-
SHA512
828d07bb1e2cad58e42eae5541dd10ebc749181da8c82283ce58539d3462915b2e49b625d764ac408cf6d6745f4e0ffb8d339c44afb8507a0f43a9974ee0c1b2
-
SSDEEP
1536:RoFmDeTmTmxzaLeUIwSIKOmJELHGOeU9w:RtsxGLQwS3OQELH/g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd481a0611ba35b93b72e2b756b2f441
Files
-
cd481a0611ba35b93b72e2b756b2f441.exe windows:1 windows x86 arch:x86
1f2012b92a702a9e1913a3b9a8e5b044
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
VirtualAlloc
CreateThread
CloseHandle
ExitProcess
UnhandledExceptionFilter
LocalFree
HeapAlloc
lstrcpyW
GetLastError
HeapFree
LocalFree
GetCurrentThreadId
CreateFileW
SetFilePointer
LocalAlloc
ExitProcess
FreeLibrary
GetACP
QueryPerformanceCounter
GetACP
GetSystemTimeAsFileTime
SetLastError
SetUnhandledExceptionFilter
lstrlenW
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
FormatMessageW
GetCurrentProcessId
lstrlenW
GetProcessHeap
VirtualAlloc
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
LocalFree
InterlockedDecrement
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetACP
LocalAlloc
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE