Static task
static1
Behavioral task
behavioral1
Sample
ccc4e7216600b46b6d02e11135cda447ec0024fbc361d6636328345bc996f531.exe
Resource
win7-20240708-en
General
-
Target
ccc4e7216600b46b6d02e11135cda447ec0024fbc361d6636328345bc996f531
-
Size
1.8MB
-
MD5
d24f72421cad9e7192381e68913d6fe1
-
SHA1
53665a95d9b8687ceb33161424433ef566e2e5e5
-
SHA256
ccc4e7216600b46b6d02e11135cda447ec0024fbc361d6636328345bc996f531
-
SHA512
cc39e24ee0c8d37524f84d9ae271aebb4b549b3947a0b735a7ade65c96d0fd466c20b801cc456af4bd044a78ee2c8d6233478260b78a61cd731fae15fb1c2c92
-
SSDEEP
49152:kiPIRMUOkiTNqXlfKsA+t5BE5XE2zonoHRlZ4:tRUriTqTAgE5jonoHl4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccc4e7216600b46b6d02e11135cda447ec0024fbc361d6636328345bc996f531
Files
-
ccc4e7216600b46b6d02e11135cda447ec0024fbc361d6636328345bc996f531.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gwnxnqxm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kzltjfaa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE