Static task
static1
Behavioral task
behavioral1
Sample
886a3bb16834d9aa319d0df87c484f0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
886a3bb16834d9aa319d0df87c484f0a.exe
Resource
win10v2004-20231215-en
General
-
Target
886a3bb16834d9aa319d0df87c484f0a
-
Size
487KB
-
MD5
886a3bb16834d9aa319d0df87c484f0a
-
SHA1
d2825953082ce75651250e8cb50aae021815862c
-
SHA256
52076fa1f87c39b4e127638746bbd3365393865f24ec39711209055fd64f9364
-
SHA512
eee177d4402dc2dbc6b3090fe24605c6e452b5d2c7f57a0529047c92905dd4f593bfdc0694026ce1fbde3458d4c45d57bbe3e3d1f145522606b94d3a9bb10fa6
-
SSDEEP
12288:MLry/neyx7f/A64j7P+tixhT8nWfUHDL+VBd2q:qKeyxTAJj7P+yWwW+VH2q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 886a3bb16834d9aa319d0df87c484f0a
Files
-
886a3bb16834d9aa319d0df87c484f0a.exe windows:4 windows x86 arch:x86
c6b0bd85f63e549c0536b6fceee78e43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetVersion
WriteFile
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharNextA
advapi32
RegOpenKeyExA
oleaut32
SysFreeString
Sections
CODE Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ