Static task
static1
Behavioral task
behavioral1
Sample
c4c55adf6c53750557732b329be19ec821c64ccdc954d937727e96a92b4c9605.exe
Resource
win7-20240705-en
General
-
Target
c4c55adf6c53750557732b329be19ec821c64ccdc954d937727e96a92b4c9605
-
Size
220KB
-
MD5
60d5c28c578f07915c3d4508dd30f9a3
-
SHA1
407d4c9bb7b7eec3e0d6385ce3be2f759f2f47c4
-
SHA256
c4c55adf6c53750557732b329be19ec821c64ccdc954d937727e96a92b4c9605
-
SHA512
4fe5a14296cb48165f007694d0b216fa4c91f80dd5d36dc9f157a814bb1274d283ce0e9bf37db6d60308a4ef73edebc210bb256ee61010568a36f2b46647e294
-
SSDEEP
3072:0rL6yao0e+0orwIkf1jke1ymRtGGGmVXGIMGe5lIt25yHtjfO2PE9w:0L6yV0e+/8jkeD/zVMt5lq9LP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4c55adf6c53750557732b329be19ec821c64ccdc954d937727e96a92b4c9605
Files
-
c4c55adf6c53750557732b329be19ec821c64ccdc954d937727e96a92b4c9605.exe windows:5 windows x86 arch:x86
bfc2475c778d826817de401d46762ab7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectW
SleepEx
GetCommProperties
GetModuleHandleW
GetConsoleAliasesA
GlobalAlloc
SetVolumeMountPointA
lstrcpynW
GetModuleFileNameW
SetConsoleTitleA
ReleaseActCtx
SetLastError
GetProcAddress
BuildCommDCBW
GetAtomNameA
LoadLibraryA
WriteConsoleA
UnhandledExceptionFilter
InterlockedExchangeAdd
SetFileApisToANSI
AddAtomA
OpenJobObjectW
FoldStringW
EnumDateFormatsA
lstrcatW
FindFirstVolumeW
LocalFree
FlushFileBuffers
CloseHandle
GetLastError
HeapFree
MultiByteToWideChar
HeapAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
user32
GetProcessDefaultLayout
winhttp
WinHttpAddRequestHeaders
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zakaluy Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gozig Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.monoba Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ