Static task
static1
Behavioral task
behavioral1
Sample
c2f726a2ddc6ebabb29fea6d8563442808a1d99e37b3e8922fcc807f387e62b0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c2f726a2ddc6ebabb29fea6d8563442808a1d99e37b3e8922fcc807f387e62b0.exe
Resource
win10v2004-20240802-en
General
-
Target
c2f726a2ddc6ebabb29fea6d8563442808a1d99e37b3e8922fcc807f387e62b0
-
Size
10.2MB
-
MD5
db5bfef719a1cca8e5f52aa0ffee2859
-
SHA1
8829034071eda0baa02373453b8c69cf5f053be7
-
SHA256
c2f726a2ddc6ebabb29fea6d8563442808a1d99e37b3e8922fcc807f387e62b0
-
SHA512
d5c4524fa18cce7c2ac06231515f0d5693b26e00af521ae08193234fe5312a0c1de76db8e916eb112d3044905f22e8392e957527a367b4223d5f7dda0dc1b807
-
SSDEEP
196608:+jQ/hHeTCC0E9gUHE4hy0SU7k+nmjPZWqcos9mgpG6qrkaR:+jQ/hHeTCC0E99oa7k+qhWqcosIgqJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2f726a2ddc6ebabb29fea6d8563442808a1d99e37b3e8922fcc807f387e62b0
Files
-
c2f726a2ddc6ebabb29fea6d8563442808a1d99e37b3e8922fcc807f387e62b0.exe windows:6 windows x64 arch:x64
2952585f6973ea6c3eb5066db035959c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
advapi32
GetAce
iphlpapi
GetIfTable
shell32
ILFree
hid
HidP_GetCaps
setupapi
SetupInstallFileA
dhcpcsvc
DhcpIsEnabled
dhcpcsvc6
Dhcpv6IsEnabled
psapi
EnumProcesses
wsock32
bind
sqlite3
sqlite3_key
winmm
PlaySoundW
imm32
ImmGetContext
oleacc
LresultFromObject
dbghelp
MiniDumpWriteDump
version
VerQueryValueW
gdiplus
GdipFree
oledlg
OleUIBusyW
oleaut32
SystemTimeToVariantTime
ole32
DoDragDrop
uxtheme
IsAppThemed
shlwapi
StrCpyW
comctl32
_TrackMouseEvent
winspool.drv
ClosePrinter
msimg32
AlphaBlend
gdi32
BitBlt
pdh
PdhCloseQuery
Sections
.AKS1 Size: 5.9MB - Virtual size: 11.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AKS2 Size: 4.1MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AKS3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE