Static task
static1
Behavioral task
behavioral1
Sample
c7ff71f2a15a8c5b889a55c909694b20N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c7ff71f2a15a8c5b889a55c909694b20N.exe
Resource
win10v2004-20240802-en
General
-
Target
c7ff71f2a15a8c5b889a55c909694b20N.exe
-
Size
35KB
-
MD5
c7ff71f2a15a8c5b889a55c909694b20
-
SHA1
cceb3fb1930aa5425abc1f36e0ef02575bc9ad3f
-
SHA256
5efc0ccfd63995950342dd908655951f56fb5a29f9cf2d7b6d1d90b58688f9b1
-
SHA512
e93f33020d0b029ba319e38b8cdcab4dc6f4096e8358140768288d8939c7fb2e1a3623ea0d6e169d5ee73c2a806988136a604abf1052d2208bc80b177fe8984b
-
SSDEEP
768:1aK6RMHQF0Ta640zl2d6EIHkKRBHC+8ySbBKmsOsh4wm:1wKHQaTaT028EIHkQBHC+8ySbBKmsdSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ff71f2a15a8c5b889a55c909694b20N.exe
Files
-
c7ff71f2a15a8c5b889a55c909694b20N.exe.exe windows:4 windows x86 arch:x86
a49a3979dbc627e3b61ffc6c7272198e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
SendMessageA
DestroyWindow
DialogBoxParamA
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
TranslateMessage
GetMessageA
FindWindowA
RegisterClassExA
LoadCursorA
DispatchMessageA
kernel32
GetStartupInfoA
ExitProcess
GetCommandLineA
HeapAlloc
ReadFile
SetLastError
GetLastError
lstrlenA
lstrcpyA
GetModuleHandleA
LoadLibraryA
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetProcessHeap
ResumeThread
CreateThread
CreateDirectoryA
gdi32
TextOutA
GetStockObject
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ