Static task
static1
Behavioral task
behavioral1
Sample
c8f28a9509413a3d24d0422609382770N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8f28a9509413a3d24d0422609382770N.exe
Resource
win10v2004-20240709-en
General
-
Target
c8f28a9509413a3d24d0422609382770N.exe
-
Size
608KB
-
MD5
c8f28a9509413a3d24d0422609382770
-
SHA1
f9e5ba1414e310eac5a7ee453d16bf6d9371b3e9
-
SHA256
0c9e991acbb99ad43f51106139707578a46e4db43d86ce1b399d322384e19561
-
SHA512
38c1c6c0a7d12f1cf53a998768b3260b40704386a075b45a8914fbd7687d3f272c212c63afc83a259a68db7a03c29f5160b2f512a4081ce671576b83813b9315
-
SSDEEP
12288:2oCgIo6Mlb08sEJ+RFQ/4vk9Vw76xqGrDz+TOxbVQJeLfwGRfkODiAWNG1xFCr3:rCgIPO+RFQ/4vk9Vwmx9ruTIKy1rCr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8f28a9509413a3d24d0422609382770N.exe
Files
-
c8f28a9509413a3d24d0422609382770N.exe.exe windows:4 windows x86 arch:x86
5289f44964dfc953ac2f98d489b9f3e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetSecurityInfoExA
ntdll
ZwWriteVirtualMemory
RtlSetTimer
user32
GetProcessWindowStation
GetClipboardSequenceNumber
Sections
.text Size: 605KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE