Static task
static1
Behavioral task
behavioral1
Sample
a10dcb057146596b8a93c8bdfc1c7e4e6b77889304009f7dcdf6d9341f6cee3c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a10dcb057146596b8a93c8bdfc1c7e4e6b77889304009f7dcdf6d9341f6cee3c.exe
Resource
win10v2004-20230220-en
General
-
Target
a10dcb057146596b8a93c8bdfc1c7e4e6b77889304009f7dcdf6d9341f6cee3c
-
Size
1.8MB
-
MD5
0fd140a48adc44bd41b83fd4538f744e
-
SHA1
04d449ad7825dfa9670d12bb48d2cc140692a75c
-
SHA256
a10dcb057146596b8a93c8bdfc1c7e4e6b77889304009f7dcdf6d9341f6cee3c
-
SHA512
3507407f06c52817192333f50967154c3d1b060336e4fddc7637d6653c4fabeeea0a21e23a2665b2f4fff8ae00f5fa2b1fa468386d2f547beeff1dae160c809c
-
SSDEEP
24576:7/b7l2J69+e9t8HTQzi2kSrzBcWZY2rNNJ52QiXM+kqwfZl+YOoFlBbtBaNjS6hy:7EJY+8tETQzkSXDaxcjjWKHZwoG7IY+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a10dcb057146596b8a93c8bdfc1c7e4e6b77889304009f7dcdf6d9341f6cee3c
Files
-
a10dcb057146596b8a93c8bdfc1c7e4e6b77889304009f7dcdf6d9341f6cee3c.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 776KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
givvuwij Size: 1004KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyqhzvmz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE