Static task
static1
Behavioral task
behavioral1
Sample
a8194f2b24d6b6511899a30a0d3aaa12217406dc7863e0cec42475aa7c3f4132.exe
Resource
win7-20230831-en
General
-
Target
a8194f2b24d6b6511899a30a0d3aaa12217406dc7863e0cec42475aa7c3f4132
-
Size
6.1MB
-
MD5
3cfc9ae205511aee6412d9777eab0ae8
-
SHA1
faea5bf1780088e682c1d1ceaa454ecfc6fc6882
-
SHA256
a8194f2b24d6b6511899a30a0d3aaa12217406dc7863e0cec42475aa7c3f4132
-
SHA512
89ec9dbfe9cead6e3ea98ef4ea1b5c3c94dd5d34409ac182873a37beee421329db9a2b0afb96c6ac161f7ae41329a0f65f292075f2bd4b5af69ad5317b0ea629
-
SSDEEP
98304:taAoMaqfStnkpT9w8pJ2KOjEZbRXUyi+FdFfEb0nVtBPi2zXVlienB+F:taxMaqfSapT9ppDPX/mSzw+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8194f2b24d6b6511899a30a0d3aaa12217406dc7863e0cec42475aa7c3f4132
Files
-
a8194f2b24d6b6511899a30a0d3aaa12217406dc7863e0cec42475aa7c3f4132.exe windows:4 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 4.8MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zzrprdcv Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocgynlcw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE