Static task
static1
Behavioral task
behavioral1
Sample
2a8c794e2e417a40e390aa2488c9bb5c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a8c794e2e417a40e390aa2488c9bb5c.exe
Resource
win10v2004-20231215-en
General
-
Target
2a8c794e2e417a40e390aa2488c9bb5c
-
Size
81KB
-
MD5
2a8c794e2e417a40e390aa2488c9bb5c
-
SHA1
1c36bb48598a05db5c1a1f9b0824e77ce2d01dd7
-
SHA256
ad4b3d2ecf7e941f77f2a7bdeb58f918ed52913d918afbf59872bb728da96c05
-
SHA512
0d2fe8d04fa8295226b309eacb74a29cb963f2511ebe0b13a5cac37be3cec163759d2e09131fca203573441ecb8536a9c2bb4f4bea0780655d41a7240bf809f9
-
SSDEEP
1536:62w2xgSKsUSLaJUwHQbHSLcdnw4Af7TO/pjRZJAWvJJKHMtcwHzOlEN:62w2xgnsUSLuUzWIevOAWCsawHzyEN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a8c794e2e417a40e390aa2488c9bb5c
Files
-
2a8c794e2e417a40e390aa2488c9bb5c.exe windows:4 windows x86 arch:x86
c1c984d79dfd7a66a305255e434ac247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ModifyMenuW
LoadMenuW
MapDialogRect
IsChild
GetWindow
IsZoomed
comctl32
ImageList_Destroy
ImageList_GetIcon
ImageList_Read
ImageList_SetImageCount
DrawInsert
FlatSB_SetScrollRange
urlmon
GetClassURL
CoInternetGetSession
IsJITInProgress
CreateAsyncBindCtx
InstallFlash
GetClassURL
comdlg32
WantArrows
ChooseColorW
GetOpenFileNameW
LoadAlterBitmap
CommDlgExtendedError
Sections
.text Size: 48KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE