Static task
static1
Behavioral task
behavioral1
Sample
7cca3e822ea8143b4396d99a27fc60f7947a96d3dc7926025685849ff9cfc613N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7cca3e822ea8143b4396d99a27fc60f7947a96d3dc7926025685849ff9cfc613N.exe
Resource
win10v2004-20241007-en
General
-
Target
7cca3e822ea8143b4396d99a27fc60f7947a96d3dc7926025685849ff9cfc613N
-
Size
95KB
-
MD5
5b8696de0503e65e4fafe78d62437a50
-
SHA1
9816ae8578aa930e688603a3a2b1514a9b2f3900
-
SHA256
7cca3e822ea8143b4396d99a27fc60f7947a96d3dc7926025685849ff9cfc613
-
SHA512
0c21010fc9c4a6e69ee906c1b8d64e84316778cb471de5733131a3c8402cabbc749246a7bd296457dcdd2aa81da9082e052fb2d38f0c68a01805110fcf42abfc
-
SSDEEP
1536:RM88HpLIhFidDAvEAsKj52joZmhp/GydN3/HGL92fTYU0t0l5snR+7WGDFBj3P7S:GLOFidDAvEbU52UQBZXx0t+Ss7WGDrPS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cca3e822ea8143b4396d99a27fc60f7947a96d3dc7926025685849ff9cfc613N
Files
-
7cca3e822ea8143b4396d99a27fc60f7947a96d3dc7926025685849ff9cfc613N.exe windows:4 windows x86 arch:x86
b86e1e58a8eb97d4c694b42a98c891fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryW
GetThreadPriority
InitializeCriticalSectionAndSpinCount
PrepareTape
WriteProcessMemory
IsBadHugeWritePtr
LockFile
GetBinaryType
EnumSystemLanguageGroupsA
FindAtomW
SetEnvironmentVariableA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ice Size: 39KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE