Static task
static1
Behavioral task
behavioral1
Sample
0c057a2dc65ced45217db3f7b7bb74e710d1eda516a2ab692ff2fd5d355c441cN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c057a2dc65ced45217db3f7b7bb74e710d1eda516a2ab692ff2fd5d355c441cN.exe
Resource
win10v2004-20240802-en
General
-
Target
0c057a2dc65ced45217db3f7b7bb74e710d1eda516a2ab692ff2fd5d355c441cN
-
Size
284KB
-
MD5
fccaac49a7c6765db8cc362adc02e330
-
SHA1
9299bae2cbea12786464558b055cdee81afc8a67
-
SHA256
0c057a2dc65ced45217db3f7b7bb74e710d1eda516a2ab692ff2fd5d355c441c
-
SHA512
822bcb3dc84676fe2b17db2d004d3a589223714fcf7a793821025f7cc9174b54477b63d80932488c822411abd08231da58442b6817a40c1b555069e6219fdf3d
-
SSDEEP
6144:UG/JGjQnQTNgl979k4zyPr5tRdzB6hW+SVXRdF+VTqnaPhsesQck:j/AQnQwPE5tRd0h9IIhsOck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c057a2dc65ced45217db3f7b7bb74e710d1eda516a2ab692ff2fd5d355c441cN
Files
-
0c057a2dc65ced45217db3f7b7bb74e710d1eda516a2ab692ff2fd5d355c441cN.exe windows:4 windows x86 arch:x86
4d2efee6f5edd66280cb0c8846157bf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
GetCurrentThread
GetACP
InterlockedExchange
DeleteAtom
GetThreadPriority
GetExpandedNameA
HeapCreate
VirtualProtect
WriteConsoleA
GetModuleHandleA
FlushFileBuffers
GetCurrentProcess
GetTimeFormatA
GetStdHandle
GetEnvironmentStringsA
FormatMessageA
LoadLibraryA
IsDebuggerPresent
GetCurrentProcessId
HeapDestroy
user32
EndPaint
ShowWindow
wsprintfA
GetCursorPos
FillRect
DragDetect
GetDlgItem
GetWindowTextLengthA
GetParent
GetWindow
GetClassNameA
BeginPaint
DrawTextA
SetActiveWindow
GetFocus
ReleaseDC
FrameRect
GetTitleBarInfo
SetForegroundWindow
advapi32
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegEnumKeyA
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ