Static task
static1
Behavioral task
behavioral1
Sample
0a2e06914935ccc5eb0c621af34a0594.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a2e06914935ccc5eb0c621af34a0594.exe
Resource
win10v2004-20231215-en
General
-
Target
0a2e06914935ccc5eb0c621af34a0594
-
Size
43KB
-
MD5
0a2e06914935ccc5eb0c621af34a0594
-
SHA1
df1260501900d330dcddd84d0600bf76c863a5f3
-
SHA256
957b9bfb1925d59df4e708192298eef3bdbd7bf1dd61cce2ecb6611bed9047e8
-
SHA512
5020f23b11e3d98fe1197e8ba100b1c7114317ce735d9ee92b6242135e0f034bbc751622e7b8ca002b585018f3e8b414e53dc62e5925fef5030a49da4595a643
-
SSDEEP
768:VIHh9boQqn6uEVk20NSP9kgwCI7n8T6xMjJM7Q+8u77ueApBYxA1HLHXgaz27:iHh9bSn6dVk5y9GMi7QLufArHXga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a2e06914935ccc5eb0c621af34a0594
Files
-
0a2e06914935ccc5eb0c621af34a0594.exe windows:5 windows x86 arch:x86
15831dab8eacbefac35403f0b1e3d89a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextW
MsgWaitForMultipleObjects
kernel32
DisconnectNamedPipe
Sections
.bcncl Size: 36KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tgj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yzupah Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ