Static task
static1
Behavioral task
behavioral1
Sample
c2425b4bbd92c0e09f58c063bb066bbf506ab7559533db475b7a8d6046ad0c37N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c2425b4bbd92c0e09f58c063bb066bbf506ab7559533db475b7a8d6046ad0c37N.exe
Resource
win10v2004-20241007-en
General
-
Target
c2425b4bbd92c0e09f58c063bb066bbf506ab7559533db475b7a8d6046ad0c37N
-
Size
54KB
-
MD5
cc526faff03036b5454d5fa1d6c701f0
-
SHA1
1d11f22e45f56f92e88fbe095257d183f6ca2864
-
SHA256
c2425b4bbd92c0e09f58c063bb066bbf506ab7559533db475b7a8d6046ad0c37
-
SHA512
5a5e2c81f5becf72b0b11fe1b84ba671fb7ad127edd52fb7f331de5a2eb5ccd73f4683710be7f44085d31ad5e618b14adcba9e4fea67cf6bc4c5a7eac5b2c90c
-
SSDEEP
768:zvKPgUJap1c5K8fKs3l43dvY55xnED4VbSW1jDhttN3HagdWpUYPA:z9UWa5KLs3lqdvY55BED4VeW1nRspUYo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2425b4bbd92c0e09f58c063bb066bbf506ab7559533db475b7a8d6046ad0c37N
Files
-
c2425b4bbd92c0e09f58c063bb066bbf506ab7559533db475b7a8d6046ad0c37N.exe windows:6 windows x86 arch:x86
f57e95b11cd7b2b8f1d327353ce150a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
apphelp
SdbDeletePermLayerKeys
SdbEnumMsiTransforms
SdbFindFirstMsiPackage
SdbFindFirstMsiPackage_Str
SdbFindFirstNamedTag
SdbFindFirstTag
SdbFindFirstTagRef
SdbFindNextMsiPackage
SdbFindNextTag
mstask
NetrJobEnum
NetrJobGetInfo
SAGetAccountInformation
SAGetNSAccountInformation
SASetAccountInformation
SASetNSAccountInformation
SetNetScheduleAccountInformation
certcli
CAAccessCheck
CAAccessCheckEx
regapi
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA
msvcrt
fopen
fread
kernel32
GetSystemDirectoryA
OutputDebugStringW
IsDebuggerPresent
MulDiv
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA
htui
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
iashlpr
AllocateAttributes
sti
StiCreateInstance
polstore
IPSecClosePolicyStore
IPSecCopyFilterData
IPSecCopyFilterSpec
IPSecCopyISAKMPData
IPSecCopyNFAData
IPSecCopyNegPolData
IPSecCopyPolicyData
IPSecCreateFilterData
IPSecCreateISAKMPData
IPSecCreateNFAData
IPSecCreateNegPolData
IPSecCreatePolicyData
IPSecDeleteFilterData
IPSecDeleteISAKMPData
IPSecDeleteNFAData
dbghelp
ImageRvaToSection
ImageRvaToVa
Sections
.text Size: 7KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsRC Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ