Static task
static1
Behavioral task
behavioral1
Sample
cc3e56fe2501a4ec2d02ecfce4277f70N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cc3e56fe2501a4ec2d02ecfce4277f70N.exe
Resource
win10v2004-20240802-en
General
-
Target
cc3e56fe2501a4ec2d02ecfce4277f70N.exe
-
Size
244KB
-
MD5
cc3e56fe2501a4ec2d02ecfce4277f70
-
SHA1
063065c955a5d84bbbe1bec9b31da19286ff6cd8
-
SHA256
ead957a0e2665209b6745f3486198f4b8d02b654dbc2ef18ee58cdb2870d84ee
-
SHA512
5a14ccb8aa4f52092274f9c962a25ec97312552c69e145215782d1da0fe1e43e9ddacfb375e06e957fc6ac0f5415fd2529966e5547a6ad62e1b34221fcce5db3
-
SSDEEP
6144:NuxZTxxz3hPlX4jE8fuOSrxTC5UI/yVyJB7JtS:NSx13jX4w8fuj2u0BltS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc3e56fe2501a4ec2d02ecfce4277f70N.exe
Files
-
cc3e56fe2501a4ec2d02ecfce4277f70N.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 217KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE