Static task
static1
Behavioral task
behavioral1
Sample
1a3403520355cccd0f5f202d35ae0549.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a3403520355cccd0f5f202d35ae0549.exe
Resource
win10v2004-20231215-en
General
-
Target
1a3403520355cccd0f5f202d35ae0549
-
Size
740KB
-
MD5
1a3403520355cccd0f5f202d35ae0549
-
SHA1
8c7e4213c7f0459c12a821b9d071060ee8858afa
-
SHA256
3b2143a421e0cc72e6daab3a06e95430f27b5b478f3b0bda70d0254fa4e88606
-
SHA512
17a42e7b6f632a2bb96fc71227e6e373c6409e12469bcf0be33c5150727feed048b1b58a8840736fcc4266b1965301d73041e4ecd9dc0fdf6bf9f43d9b7229d1
-
SSDEEP
12288:I85xet7q10zjkoeBDE11YH/unh/FhUR3Y1QMoMiFcWGv3qEgNWN7G:Ikethe+11YGtTURI2B0JN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a3403520355cccd0f5f202d35ae0549
Files
-
1a3403520355cccd0f5f202d35ae0549.exe windows:4 windows x86 arch:x86
9cc7a5156f0f5af45757c684158cde51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetTempPathA
LoadLibraryA
FreeResource
WriteFile
LoadResource
FindResourceA
GetStringTypeA
LCMapStringW
CloseHandle
GetProcAddress
LockResource
FreeLibrary
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
MessageBoxA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 704KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ