Static task
static1
Behavioral task
behavioral1
Sample
c9fdcf1b79847ca3f7e7507ab20f6760N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c9fdcf1b79847ca3f7e7507ab20f6760N.exe
Resource
win10v2004-20240802-en
General
-
Target
c9fdcf1b79847ca3f7e7507ab20f6760N.exe
-
Size
41KB
-
MD5
c9fdcf1b79847ca3f7e7507ab20f6760
-
SHA1
4dedfb589a12394a0c5f3c6c19b3610ca0ef0680
-
SHA256
3e8eec55e83c0788e4154776620900a3cb1aa22f9b6469efff4e1236336db9bc
-
SHA512
b8fcbd7cfc46e081fcec1fbcab228c9b10d71b085f6be6c2ba22bf49c94c540972cb99098f76b50e3ee0b44410ddba1ebcca39239602c0a67b8f4244a65dfd32
-
SSDEEP
768:JW1eUlhdH9t9x8IzbaE9z1X+wi+Q1KUaBpnW1iGLnSXDJWAEGzcDaZm:J0ekddt9JzvgXhKUApnWPSXMAEPDaZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9fdcf1b79847ca3f7e7507ab20f6760N.exe
Files
-
c9fdcf1b79847ca3f7e7507ab20f6760N.exe.exe windows:4 windows x86 arch:x86
ebce367c9974ea9ba13f7ff098b320ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_controlfp
user32
IsWindow
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
urlmon
URLDownloadToFileA
wininet
InternetCrackUrlA
ws2_32
WSAStartup
ole32
CLSIDFromString
oleaut32
CreateErrorInfo
version
GetFileVersionInfoSizeA
gdi32
GetDeviceCaps
Sections
.text Size: 29KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE