Static task
static1
Behavioral task
behavioral1
Sample
c8c2783477126ed10e1921a8b5088800N.exe
Resource
win7-20240729-en
General
-
Target
c8c2783477126ed10e1921a8b5088800N.exe
-
Size
386KB
-
MD5
c8c2783477126ed10e1921a8b5088800
-
SHA1
ac97e4bb12de090d89dcffdfd544ff27a8a9de9f
-
SHA256
c84bff38fc0b9ed06ef537e949602a40108c8b2266de6672f9555fb64f0f5acb
-
SHA512
b05fca3391ef23b921310e5dfb9971de320a825faf61385751127774da23e144d9e5a278e342a06c499e99b694a72bc40fe1fbe88083fd20fd51e1dad7f59039
-
SSDEEP
6144:RJ0g5eRFPPASXJRD6sWUeLv0M1MNhctfSahF56:kLFHAOJYhlFGNqtfS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8c2783477126ed10e1921a8b5088800N.exe
Files
-
c8c2783477126ed10e1921a8b5088800N.exe.exe windows:5 windows x86 arch:x86
1991af52a6314ff5b23d44cf01c243a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasExesA
CommConfigDialogA
SetEndOfFile
GetConsoleAliasExesLengthA
InterlockedIncrement
OpenJobObjectA
GetCurrentProcess
GetLogicalDriveStringsW
SetDefaultCommConfigW
GetSystemWindowsDirectoryW
SetEnvironmentVariableW
CreateJobObjectW
QueryDosDeviceA
InterlockedCompareExchange
SetVolumeMountPointW
UnlockFile
OpenSemaphoreA
_lcreat
GetTickCount
GetNumberFormatA
CreateActCtxW
SetFileShortNameW
LoadLibraryW
_hread
GetCalendarInfoA
CreateEventA
SetConsoleCP
GetFileAttributesA
VerifyVersionInfoA
GetShortPathNameA
GetLastError
SetLastError
GetProcAddress
CreateNamedPipeA
GlobalFree
SetThreadPriorityBoost
LoadLibraryA
LocalAlloc
GetNumberFormatW
SetConsoleWindowInfo
VirtualProtect
EnumDateFormatsW
SetProcessShutdownParameters
GetDiskFreeSpaceExA
ReadConsoleInputW
GetTempPathA
LCMapStringW
HeapSize
RtlUnwind
IsProcessorFeaturePresent
GetStringTypeW
WideCharToMultiByte
Sleep
MultiByteToWideChar
HeapAlloc
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapFree
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
user32
ChangeMenuW
GetKeyNameTextA
GetWindowTextLengthA
DdeQueryStringW
LoadMenuW
GetMenuState
CharUpperW
GetSysColor
SetCaretPos
SetClipboardViewer
Sections
.text Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 94KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ