Static task
static1
Behavioral task
behavioral1
Sample
c1f007729830989ee58dec017e6bb390N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1f007729830989ee58dec017e6bb390N.exe
Resource
win10v2004-20240802-en
General
-
Target
c1f007729830989ee58dec017e6bb390N.exe
-
Size
45KB
-
MD5
c1f007729830989ee58dec017e6bb390
-
SHA1
5933e4dbeaa8c7d999f605a2e1126a23a9087760
-
SHA256
e037de76038b68c15634c2e8a41ada263204bed5e6cc9b1540c1180b48422318
-
SHA512
8d55533eb0464b31b056913681e859534c9856634e3614522c6d8fe7485b46e440087bda813ba66854a85841d9093e01fb8661b858fd415208aa5ce59849205c
-
SSDEEP
768:HcLooSSWKdmISUSMFBgnBughObF0r5TiEs6igwWYVtrkBdTH2:HOooVWKdvXHBgnBugQbm5ef1VFSdTW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1f007729830989ee58dec017e6bb390N.exe
Files
-
c1f007729830989ee58dec017e6bb390N.exe.exe windows:5 windows x86 arch:x86
93b9c839c40250d5b927e08cd9f45af5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
_controlfp
__set_app_type
printf
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
toupper
__p__fmode
kernel32
lstrlenA
lstrcatA
GetFileTime
GetFileAttributesA
GlobalFree
GlobalAlloc
GetStringTypeW
lstrcpynA
IsDBCSLeadByte
lstrcpyA
GetFullPathNameA
lstrcmpiA
SetThreadLocale
GetSystemDefaultLangID
GetConsoleOutputCP
GetThreadLocale
_lcreat
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
_lclose
LocalAlloc
LocalFree
_lopen
_lread
GetLastError
_lwrite
_llseek
DeleteFileA
GetFileSize
GetModuleHandleA
lstrcmpA
user32
LoadStringA
CharLowerA
CharToOemA
cabinet
ord21
ord22
ord20
ord23
ntdll
NlsMbCodePageTag
RtlMultiByteToUnicodeN
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE