Static task
static1
Behavioral task
behavioral1
Sample
a3f6b68c0eb144fbc2fba0cb783ebf80_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a3f6b68c0eb144fbc2fba0cb783ebf80_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
a3f6b68c0eb144fbc2fba0cb783ebf80_exe32.exe
-
Size
56KB
-
MD5
a3f6b68c0eb144fbc2fba0cb783ebf80
-
SHA1
a74100e3516cb1abd6819ce65eaae1a6e8466400
-
SHA256
dd711acd8dc1f694beb76a4dc25cd704469dce99a8c65a435b3a154af4458d43
-
SHA512
3e3ff68d9ac55d717d5114f61c32a141d7a204be5cfd86d3be6a79df8f88a5cbc099f8888622f7b05609eb57eae76eb4a1388536104496ba310309fcd5ac608a
-
SSDEEP
768:vd3Od6sWL8Dwu5TX2I11Z2ZzgoZhKiB9qiPOt/Q28B2oRsLo:vIdv1DaE85goCAO13oRW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f6b68c0eb144fbc2fba0cb783ebf80_exe32.exe
Files
-
a3f6b68c0eb144fbc2fba0cb783ebf80_exe32.exe.exe windows:4 windows x86
107960db80ba503efd4c0890e230c057
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
LoadLibraryA
_lwrite
_lcreat
_lclose
_lread
_llseek
_lopen
FlushFileBuffers
RaiseException
SetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CloseHandle
user32
LoadStringA
PostQuitMessage
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE