Static task
static1
Behavioral task
behavioral1
Sample
1a04b21fda46c12537cd6a1a7444fa0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a04b21fda46c12537cd6a1a7444fa0a.exe
Resource
win10v2004-20231215-en
General
-
Target
1a04b21fda46c12537cd6a1a7444fa0a
-
Size
19KB
-
MD5
1a04b21fda46c12537cd6a1a7444fa0a
-
SHA1
44682677a0452a666dfab8cfa6a2c21c63d1dd16
-
SHA256
bdd1be7e549b17164e67defff153512518a950010f1eb9245a3bff81f4a1b96d
-
SHA512
4ee3a39d2d030f2d19a3d188a2a6c5092c2ee774c88b65e0d399f536ee117455c8f43f7b610dad362c8aeed838f63c34d1e0aecc14657335b325193baeb47668
-
SSDEEP
192:mXaNMOhYzUSgaF1EO8AjZxOaFdIZe+iennV4Z3Zx/9a6+:mXaNM0LSDu/AVxOavee4ixPV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a04b21fda46c12537cd6a1a7444fa0a
Files
-
1a04b21fda46c12537cd6a1a7444fa0a.exe windows:4 windows x86 arch:x86
4572050cc38ec64dec44dc27e0e186a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PulseEvent
GetModuleHandleA
TlsGetValue
GetOEMCP
CompareStringA
GetUserDefaultLangID
GetConsoleCP
IsDBCSLeadByte
TlsFree
CreateMutexA
GetThreadPriority
GetThreadLocale
GetLargestConsoleWindowSize
GetThreadTimes
GetDefaultCommConfigA
AddAtomA
CallNamedPipeA
GetExitCodeThread
SetEvent
VirtualAlloc
ReleaseMutex
user32
GetClassInfoExA
GetForegroundWindow
GetFocus
InvalidateRect
GetWindow
ReleaseDC
GetSystemMetrics
IsIconic
IsWindowVisible
GetActiveWindow
RegisterClassA
GetWindowTextA
GetDC
GetWindowTextLengthA
ValidateRect
ShowWindow
ReleaseDC
GetClassNameA
CloseWindow
tapi32
MMCInitialize
MMCSetLineInfo
MMCSetPhoneInfo
MMCSetServerConfig
MMCShutdown
mlang
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ