Static task
static1
Behavioral task
behavioral1
Sample
aed196e6cb7567d7d43031564f18e7a5209264457e9a721c37139e422f882e2c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
aed196e6cb7567d7d43031564f18e7a5209264457e9a721c37139e422f882e2c.exe
Resource
win10v2004-20230915-en
General
-
Target
aed196e6cb7567d7d43031564f18e7a5209264457e9a721c37139e422f882e2c
-
Size
64KB
-
MD5
bd76df0bc74f84adac2dbc5c8f65b1c0
-
SHA1
2c9945ea78dbf97bdb8cebe4381e90b9d8456204
-
SHA256
aed196e6cb7567d7d43031564f18e7a5209264457e9a721c37139e422f882e2c
-
SHA512
6bb13b5aed233a2767d1da47b3a1a3306a09f033796f7ccf4911856d1ce31e3e66b880bcbae1fcf49c565a78a17445515965926ef9ebcbc83de923d4590125a7
-
SSDEEP
384:NA5Enrj1etn1xq3U4aP5s1xq3U4aPZ1Kv:NAGrJetb4gM4gS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aed196e6cb7567d7d43031564f18e7a5209264457e9a721c37139e422f882e2c
Files
-
aed196e6cb7567d7d43031564f18e7a5209264457e9a721c37139e422f882e2c.exe windows x86
9e379461b4aecfdac4bb3108ed1a29e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateToolhelp32Snapshot
CreateDirectoryA
GetWindowsDirectoryA
MoveFileA
DeleteFileA
Process32First
lstrcatA
GetSystemDirectoryA
ExitProcess
GetStartupInfoA
GetModuleHandleA
OpenProcess
TerminateProcess
Process32Next
CloseHandle
SetFileAttributesA
GetCurrentProcess
user32
GetMessageA
DispatchMessageA
TranslateMessage
ShowWindow
LoadIconA
SendMessageA
MessageBoxA
SystemParametersInfoA
PostQuitMessage
CreateDialogParamA
EndDialog
ExitWindowsEx
advapi32
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyA
AdjustTokenPrivileges
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_stricmp
_except_handler3
_controlfp
__set_app_type
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
shlwapi
SHDeleteKeyA
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE