Static task
static1
Behavioral task
behavioral1
Sample
a5a2a1085d15f0c1126cbf8e6b47916d459f1575008a96271222921f839247b5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a5a2a1085d15f0c1126cbf8e6b47916d459f1575008a96271222921f839247b5.exe
Resource
win10v2004-20230915-en
General
-
Target
a5a2a1085d15f0c1126cbf8e6b47916d459f1575008a96271222921f839247b5
-
Size
1.3MB
-
MD5
aa77261ca5a40f4c0cb08831b4cb47d8
-
SHA1
f623646da7789e380ba4ef91cd8517c0bd328ea1
-
SHA256
a5a2a1085d15f0c1126cbf8e6b47916d459f1575008a96271222921f839247b5
-
SHA512
14395a52ab54813b3d099fe231b1f44fad971c50420341323310d4395559c9420b734b5380d6e0fb3d4196c1f3e889ac9cad74ca19a03c94070a973d0cda3f98
-
SSDEEP
24576://bIwXo7jMqJ1WOeXGJZa9xxlMe2ptjwNJaM4PT1lWsUjYTtylf25DFRHZ9NPte:/83vMdOZZOx4ekGfaMlsqgO4J/Ve
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5a2a1085d15f0c1126cbf8e6b47916d459f1575008a96271222921f839247b5
Files
-
a5a2a1085d15f0c1126cbf8e6b47916d459f1575008a96271222921f839247b5.exe windows:4 windows x86
ab472bdb8dda700adcda2438dea10aca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
user32
LoadIconA
gdi32
GetTextMetricsA
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 508KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ