Static task
static1
Behavioral task
behavioral1
Sample
c9ed47ecfef8c0e87af0c40a9ad41ed1b7cdbe9dc79b7992a95873aabd1c9b57N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c9ed47ecfef8c0e87af0c40a9ad41ed1b7cdbe9dc79b7992a95873aabd1c9b57N.exe
Resource
win10v2004-20240802-en
General
-
Target
c9ed47ecfef8c0e87af0c40a9ad41ed1b7cdbe9dc79b7992a95873aabd1c9b57N
-
Size
41KB
-
MD5
5c98660b0b1700c1730cfa2659b56260
-
SHA1
8bb22c62065c644c88ad2a90d7df7528c7f0c275
-
SHA256
c9ed47ecfef8c0e87af0c40a9ad41ed1b7cdbe9dc79b7992a95873aabd1c9b57
-
SHA512
495b3c735c95998722e61302bf2b4be44fd70d39c5c638a5cc5299565d1a5334a0648f1895736a1b2f746afcc81937932143e0fe6a96c68ddbc77cb393d2e94b
-
SSDEEP
768:szM/e9xPnxqPsFUqj70sBDAtOlfiNJnr98pl4:3/Q5xIEn70slA0fUJsl4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c9ed47ecfef8c0e87af0c40a9ad41ed1b7cdbe9dc79b7992a95873aabd1c9b57N
Files
-
c9ed47ecfef8c0e87af0c40a9ad41ed1b7cdbe9dc79b7992a95873aabd1c9b57N.exe windows:4 windows x86 arch:x86
411c26819234a12cc52aaaf849f1d844
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
wininet
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile
shell32
ShellExecuteW
ntdll
RtlDecompressBuffer
swprintf
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 903B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ