Static task
static1
Behavioral task
behavioral1
Sample
c04f85b88d84ee294251d8e182bf061375371dc3b6e4d84de96e710a83ead9ca.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
c04f85b88d84ee294251d8e182bf061375371dc3b6e4d84de96e710a83ead9ca.exe
Resource
win10v2004-20240226-en
General
-
Target
c04f85b88d84ee294251d8e182bf061375371dc3b6e4d84de96e710a83ead9ca
-
Size
77KB
-
MD5
57bc6f7e3a0609672e1fe25dc698d77f
-
SHA1
322a2acdc0bcf89c40aa0e5908caebac1937e310
-
SHA256
c04f85b88d84ee294251d8e182bf061375371dc3b6e4d84de96e710a83ead9ca
-
SHA512
5ac2e9a5a2224490473a874d114b20797117096ae3931e307b8df2c54749fa74f5db6209cd4182035c033cf4933e336fed7be207e82df711d73af6eb13e509b2
-
SSDEEP
768:JWDnMge+QDKVZhPsED3VK2+ZtyOjgO4r9vFAg2rqVcBf55vVWL9CUk+/wcWagW:w/e+mKFYTjipvF26cZ0L4P+4agW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c04f85b88d84ee294251d8e182bf061375371dc3b6e4d84de96e710a83ead9ca
Files
-
c04f85b88d84ee294251d8e182bf061375371dc3b6e4d84de96e710a83ead9ca.exe windows:5 windows x86 arch:x86
28e46cf78fd543ccdc5071ec4c6c58bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cabinet
ord13
gdi32
GetWindowOrgEx
SetWindowOrgEx
CreateDCA
kernel32
ExitProcess
GetModuleHandleW
GetConsoleCP
SetConsoleMode
GetProcAddress
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ