Static task
static1
Behavioral task
behavioral1
Sample
cd7c9354687d53478d3ad8a4797f21c1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd7c9354687d53478d3ad8a4797f21c1.exe
Resource
win10v2004-20240226-en
General
-
Target
cd7c9354687d53478d3ad8a4797f21c1
-
Size
16KB
-
MD5
cd7c9354687d53478d3ad8a4797f21c1
-
SHA1
d0314bb302490930293f92eddd116d74a6522fa3
-
SHA256
265f04a685da3f478e608dcbb64f50767131b6dfbbaec502f75deef8b23842af
-
SHA512
43cf07f6e730f89d89797dff81e27ed21707afda62e8142ef6dcb965b8bf6d55e05b9866461d6e58a90c8d8b768be9f7a0257ff915f2e902e51e651f98c14354
-
SSDEEP
48:6FsZHGc2cmi4qaag+PGPFVFCnfz0E3tWKRLP2qCvamoz4IFBq7:a8mLcVZaX+wFufz0ElP2p3oz4QQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd7c9354687d53478d3ad8a4797f21c1
Files
-
cd7c9354687d53478d3ad8a4797f21c1.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ