Static task
static1
Behavioral task
behavioral1
Sample
c3c27f89ad53b45e848e2913461910c21fa3ce6dab6dd867bc0f703ab1a1880aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c3c27f89ad53b45e848e2913461910c21fa3ce6dab6dd867bc0f703ab1a1880aN.exe
Resource
win10v2004-20240802-en
General
-
Target
c3c27f89ad53b45e848e2913461910c21fa3ce6dab6dd867bc0f703ab1a1880aN.exe
-
Size
189KB
-
MD5
f06a7129826a1d85253596094049f960
-
SHA1
ff08b756e7c1f50f43b0a1be28540117e062adc2
-
SHA256
c3c27f89ad53b45e848e2913461910c21fa3ce6dab6dd867bc0f703ab1a1880a
-
SHA512
5353d103f87f412c21e574f673af7593c3a788bcdbd1238bb2224aa5e0c86c41071bd10dfa02cf955e32a6063227e273b36aad14d0763804ee71c11d26f4e0fc
-
SSDEEP
3072:t9n6vjyajsyLs56sBcYglYqqxRuAh7LvJPxmbNWCcJJ6i1uXEVhpGoeT7neDTAMF:vgjAWFsuYglYqqPuAhHxPFCZ+zpqT7eW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3c27f89ad53b45e848e2913461910c21fa3ce6dab6dd867bc0f703ab1a1880aN.exe
Files
-
c3c27f89ad53b45e848e2913461910c21fa3ce6dab6dd867bc0f703ab1a1880aN.exe.exe windows:4 windows x86 arch:x86
9afda20849183ea2be73a3209160e726
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleTranslateAccelerator
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
gdiplus
GdipCloneImage
winmm
timeGetTime
timeSetEvent
kernel32
GetModuleHandleA
LoadLibraryW
BeginUpdateResourceW
GetLastError
DeleteCriticalSection
LCMapStringA
LocalFree
GetSystemInfo
EnumResourceTypesW
GetProcAddress
EnterCriticalSection
LocalAlloc
GetShortPathNameW
LeaveCriticalSection
LCMapStringW
SetStdHandle
InitializeCriticalSection
GetStringTypeA
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ