Ip
Static task
static1
Behavioral task
behavioral1
Sample
c3ee2318c72ff3658b48eec582032f68c3f0b053ed1f6643ee0fc59ef6bcd30c.exe
Resource
win7-20240220-en
General
-
Target
c3ee2318c72ff3658b48eec582032f68c3f0b053ed1f6643ee0fc59ef6bcd30c
-
Size
276KB
-
MD5
96ee8ef0efca224dc0b891b2f866fb58
-
SHA1
22083a235912e7419b6aba068b9a064c0f92306d
-
SHA256
c3ee2318c72ff3658b48eec582032f68c3f0b053ed1f6643ee0fc59ef6bcd30c
-
SHA512
ac36dbdc80529882af434a1271855d887195045431a21c964b29a366c89a4433a35872aee925af41e79b94e189d7c0148cea44138320affcea8e82c6e64ec7ed
-
SSDEEP
3072:BQpJDBRotOQUyIgkhrkqwwlTWim50hAcbKV/wxjqU/V541+ipz8o1k15wZxtthz:BQLDVVZHXbmmxuU/V541+ipgouHwZh9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3ee2318c72ff3658b48eec582032f68c3f0b053ed1f6643ee0fc59ef6bcd30c
Files
-
c3ee2318c72ff3658b48eec582032f68c3f0b053ed1f6643ee0fc59ef6bcd30c.exe windows:4 windows x86 arch:x86
bef05eb85d02944c5321875c4b67f994
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
LoadLibraryA
VirtualFree
GetProcAddress
IsBadReadPtr
HeapFree
FreeLibrary
WriteFile
Sleep
RtlUnwind
RaiseException
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
IsBadWritePtr
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
wsprintfA
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE