Static task
static1
Behavioral task
behavioral1
Sample
a2cc3846f1ceb5672149fd1e3b74cb0257d5fc69c2112424bace9a28a30b0ad6.exe
Resource
win7-20240705-en
General
-
Target
a2cc3846f1ceb5672149fd1e3b74cb0257d5fc69c2112424bace9a28a30b0ad6
-
Size
3.1MB
-
MD5
cf723c40d326d50b04cc4bebf382b9a6
-
SHA1
76fd92da2acb9c36d6ed9f2b618b126cf6d5afe1
-
SHA256
a2cc3846f1ceb5672149fd1e3b74cb0257d5fc69c2112424bace9a28a30b0ad6
-
SHA512
f7a1b6267c2ee7db25aa238f359f3a2a93e7e9509acf6c4ebf2d9ff9a3f9434b2991d3d74cac37282caa8b0c2e2e918d0982439c65f2bfd7045c014a62ba0ae6
-
SSDEEP
49152:+uTfYSewEY9GyI/i7BvRkLs+ZrLHvrp9DOvUKGtJ+1lOaGFnla3vOFrPI:LJ9bGkkTZrLPl9uUKGtJ+1dGFnl2WFc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2cc3846f1ceb5672149fd1e3b74cb0257d5fc69c2112424bace9a28a30b0ad6
Files
-
a2cc3846f1ceb5672149fd1e3b74cb0257d5fc69c2112424bace9a28a30b0ad6.exe windows:4 windows x86 arch:x86
3bdfffd3f0e54b2d1b9978d7d539b9f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
socket
kernel32
GetACP
user32
GetMessageA
gdi32
ExcludeClipRect
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemAlloc
oleaut32
VarDateFromStr
comctl32
ImageList_AddMasked
wldap32
ord29
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.9MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ