Static task
static1
Behavioral task
behavioral1
Sample
c7854ed8d988ffc7993ed81e952b9210N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c7854ed8d988ffc7993ed81e952b9210N.exe
Resource
win10v2004-20240802-en
General
-
Target
c7854ed8d988ffc7993ed81e952b9210N
-
Size
28KB
-
MD5
c7854ed8d988ffc7993ed81e952b9210
-
SHA1
958aa8834a901ee5df985c7833888b9619413f49
-
SHA256
cc0aaee33550b56cd2b606cd53d61c4a38e5da0592286b4ff7c0c0f5a0560336
-
SHA512
9d7a5dc563712b7e72d8edb456d3c1bde9fef2801d17fcfea4ec364ed39a2035c11f1f4e5aea72b4bc817fee0ff1508163ae59a4b609cfb82935ed599216e2c2
-
SSDEEP
384:TdlMhxFWSpx0jeblmGd5A70XBnWoLfKkLeLJM4aVPUKX9bii7rVpkpaqGja9vP/M:plsh/EIjPBW7LmLq0bv7rox9vXy7xV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7854ed8d988ffc7993ed81e952b9210N
Files
-
c7854ed8d988ffc7993ed81e952b9210N.exe windows:4 windows x86 arch:x86
8b1ce836b575e950163679a8a4e4d5e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
mfc42
ord2055
msvcrt
_except_handler3
user32
SendMessageTimeoutA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ws2_32
htons
wininet
HttpAddRequestHeadersA
Sections
��� Size: 22KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE