Static task
static1
Behavioral task
behavioral1
Sample
c9a10d76236b7e1679fca788a76a46f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c9a10d76236b7e1679fca788a76a46f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c9a10d76236b7e1679fca788a76a46f0N.exe
-
Size
20KB
-
MD5
c9a10d76236b7e1679fca788a76a46f0
-
SHA1
b4c02b07859905450f0732d370dd338d6da3b67a
-
SHA256
6b45bd6d557f5a414c058ed6398b4a2f4661dd24cc369aaf167818662ba7e97b
-
SHA512
d2448679f46913fb98d8ef39e332d7efe328f81052bdcfec42ff976b5e04bdcae2702fb4483c8b9838eaf4c6b73b50d7a505acfe8245e50235693687d9d06956
-
SSDEEP
384:4WbHbe8obzoLsdA5+d73q3aDOKyF7kVaooyvCANa/:ZbZobkhs9DOb7efJa/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9a10d76236b7e1679fca788a76a46f0N.exe
Files
-
c9a10d76236b7e1679fca788a76a46f0N.exe.exe windows:5 windows x86 arch:x86
880ebc50803ad4d22b110e0b022d9576
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
DeleteCriticalSection
UnhandledExceptionFilter
GetTimeZoneInformation
CloseHandle
lstrcpyA
EnterCriticalSection
FindResourceA
InitializeCriticalSection
RtlUnwind
CreateFileMappingA
LockResource
GetLocalTime
FindClose
LoadResource
GetTempPathA
GetStartupInfoA
FindFirstFileA
IsDebuggerPresent
LeaveCriticalSection
GetLastError
FindNextFileA
SizeofResource
MapViewOfFile
DeleteFileA
lstrcmpiA
SetUnhandledExceptionFilter
GetSystemTime
LocalFree
CreateFileA
UnmapViewOfFile
LocalAlloc
CreateDirectoryA
ExitProcess
FormatMessageA
ReadFile
VirtualAlloc
GetModuleHandleA
GetCurrentProcess
TerminateProcess
user32
wsprintfA
LoadCursorA
MessageBoxA
LoadStringA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ