Static task
static1
Behavioral task
behavioral1
Sample
cc2ac829e8dcb88747a6d0407d00278589c32ac19c61d1771b4ad67409ca84bb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cc2ac829e8dcb88747a6d0407d00278589c32ac19c61d1771b4ad67409ca84bb.exe
Resource
win10v2004-20240802-en
General
-
Target
0d09c8bb31324cf75661e026f308e905.zip
-
Size
5KB
-
MD5
dcb4876989b5ea8bda279e95de00b29a
-
SHA1
b268deec720e9a7eb5d7dc1eb68c189a2d1fdcd9
-
SHA256
894c54c79927c84d0c1f043a9c649a52a84481bdee58853726ef072a8823566e
-
SHA512
0fef596ef7542ccc3e94188577897d8d9a7a9f4440ab4486b8d9000f86d88c5533bf9c9acad38c5edd2824153394d5eeea1f60b7f88364704ee2abaf1e14d04d
-
SSDEEP
96:jMov3b3G2b/RhM3dQ+w/u0BRsLmVpN37FGFN3MdouoZQWmiwZs1tEV4PRh0XlXom:Zj3l6AHBRsLg7eyoyZs1y4PR2lX8Q9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cc2ac829e8dcb88747a6d0407d00278589c32ac19c61d1771b4ad67409ca84bb
Files
-
0d09c8bb31324cf75661e026f308e905.zip.zip
Password: infected
-
cc2ac829e8dcb88747a6d0407d00278589c32ac19c61d1771b4ad67409ca84bb.exe windows:4 windows x86 arch:x86
Password: infected
802dcac7aab948c19738ba3df9f356d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
memcpy
strncpy
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetTickCount
TlsGetValue
CopyFileA
WriteFile
HeapFree
CreateFileA
SetFilePointer
GetFileSize
ReadFile
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsFree
GetLastError
SetLastError
WaitForMultipleObjects
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
Sections
.code Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ