Static task
static1
Behavioral task
behavioral1
Sample
cd8b6e34991d341f6ae3a38198353260.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cd8b6e34991d341f6ae3a38198353260.exe
Resource
win10v2004-20240226-en
General
-
Target
cd8b6e34991d341f6ae3a38198353260
-
Size
16KB
-
MD5
cd8b6e34991d341f6ae3a38198353260
-
SHA1
9e73c4f5324317fa7c33a8b2c99280dbe38d7156
-
SHA256
ece6421dee4111b83b9f6c2ec6eff812b8655e40046b08124b3ac1d24956e1b0
-
SHA512
ce6b85c76cb698bc69591c52d717758a37d7c1e8287829d6b568e83ee6633119849753268ed602b9a83bee938accac7c23b5b1658c10cb7c46bb516b7026cac8
-
SSDEEP
96:qy4WF7cLQPJJvjSuim3HkW0ROOZo+As7cmsLwfiPinPtboynt:lPRjVH+RZobdLwfiPoP1oyn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd8b6e34991d341f6ae3a38198353260
Files
-
cd8b6e34991d341f6ae3a38198353260.exe windows:4 windows x86 arch:x86
3b9a484e6fab41e71f3c387f30971670
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetFileTime
CreateFileA
GetFileTime
WritePrivateProfileStringA
GetSystemDirectoryA
GetLocalTime
GetPrivateProfileIntA
SystemTimeToFileTime
GetSystemTime
WinExec
GetStartupInfoA
GetModuleHandleA
user32
LoadIconA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetWindowPos
SendMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
WaitMessage
PostQuitMessage
DefWindowProcA
LoadCursorA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_itoa
_acmdln
exit
ispunct
isprint
islower
isgraph
sprintf
_exit
_XcptFilter
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE