Static task
static1
Behavioral task
behavioral1
Sample
c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343.exe
Resource
win10v2004-20240802-en
General
-
Target
c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343.exe
-
Size
1.8MB
-
MD5
54c58b72f98cb63c44e7694add551e9d
-
SHA1
35bfaab9d1811f8b6f3126caced09e77fdfafdb9
-
SHA256
c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343
-
SHA512
0000808a6d3a2de82c832ca8a9bce1d7ec81c20a93d20bd38f5213a4428ebf8db747008e208bf9986ff12c7367ed1657004466c58c5e7a9da4cbd85231125464
-
SSDEEP
24576:YNPY/6+X469a7EoPwmN5ZIa1ojd9PAGx2jcUEP7UjTAFwAqiRuuPd:KP6cQry/ogmaUoUFXqiMuPd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343.exe
Files
-
c69cd6a9a09405ae5a60acba2f9770c722afde952bd5a227a72393501b4f5343.exe.exe windows:6 windows x86 arch:x86
5acdcdc58a742b442c6157d46ce0278d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
CreateFileW
GetFileSize
GetShortPathNameW
SetFilePointer
WriteFile
GetTempPathW
CloseHandle
GetLastError
GetCurrentProcess
GetSystemDirectoryW
IsWow64Process
FreeResource
LoadResource
LockResource
SizeofResource
WinExec
FindResourceW
WideCharToMultiByte
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
RtlUnwind
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
GetLocaleInfoEx
CompareStringEx
GetDateFormatEx
GetTimeFormatEx
HeapAlloc
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
EncodePointer
DecodePointer
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
TerminateProcess
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
HeapValidate
GetSystemInfo
InterlockedExchange
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetFileType
InitOnceExecuteOnce
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
LoadLibraryW
OutputDebugStringA
WriteConsoleW
RaiseException
user32
LoadIconA
LoadCursorA
EndPaint
BeginPaint
UpdateWindow
EndDialog
DialogBoxParamA
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
DefWindowProcA
LoadStringA
LoadAcceleratorsA
shell32
SHGetSpecialFolderPathW
shlwapi
PathRemoveFileSpecW
Sections
.text Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ