Static task
static1
Behavioral task
behavioral1
Sample
CW_00402902400429..exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
CW_00402902400429..exe
Resource
win10v2004-20240802-en
General
-
Target
CW_00402902400429.rar
-
Size
492KB
-
MD5
fc726ee70897589017c2a8f66c1f32a9
-
SHA1
c8b6b1f32cd77eff3b2ca2ede86b5a96d4165ab6
-
SHA256
ca54eba9a7d31e27d10fc88615086450eb7c73410607cab46f9a8a59b1674594
-
SHA512
46c85408e359077328f7bf0a4db5747331f88d2d03da4c0a52ecc6b01063a2a149db143edfb452a2f4341bd1446e33e11726cbd7c74c9790fb55a0717e4d1c25
-
SSDEEP
12288:olUDpTi4j5+MsK7iF8FjWjTzj4sXfiKHAmX0k:jpG4sMF3gzjpXfiKgi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CW_00402902400429..exe
Files
-
CW_00402902400429.rar.rar
-
CW_00402902400429..exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ