Static task
static1
Behavioral task
behavioral1
Sample
a4d07aabb61e81c0fd22d8593af5da3779a482501aedad00b29e1bc3fb4e4b35.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
a4d07aabb61e81c0fd22d8593af5da3779a482501aedad00b29e1bc3fb4e4b35.exe
Resource
win10v2004-20230703-en
General
-
Target
a4d07aabb61e81c0fd22d8593af5da3779a482501aedad00b29e1bc3fb4e4b35
-
Size
10.2MB
-
MD5
b60e56a6e13e6c2e5762b03021132c15
-
SHA1
58757da0f58fb3733ae0ab6ee7da32bfef7e92c9
-
SHA256
a4d07aabb61e81c0fd22d8593af5da3779a482501aedad00b29e1bc3fb4e4b35
-
SHA512
41afa203abe10edb7c2cdf0c135c0fce0ecaf676ee3c7cb21335a92ae305f3b488a014275fa4d8ed001bd1350cdfd9f7418a48487c3910ca11e08627ec89958c
-
SSDEEP
196608:MYMkHue+6eqHbxTRC+09iIP1YAgQfxtikHHZ7uy048VKunPdEuDYT9l:MYMU/+6n9b0FP11f2knHJYPdE4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4d07aabb61e81c0fd22d8593af5da3779a482501aedad00b29e1bc3fb4e4b35
Files
-
a4d07aabb61e81c0fd22d8593af5da3779a482501aedad00b29e1bc3fb4e4b35.exe windows x86
54da4d3b3c57eab4ace709430cb09f3f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
GetModuleHandleA
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
0000001 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000002 Size: 280KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000003 Size: 80KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000004 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 993KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000006 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000007 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000008 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000009 Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE