Static task
static1
Behavioral task
behavioral1
Sample
3aaf10f5e7953a5ce274f66fb6bb26af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3aaf10f5e7953a5ce274f66fb6bb26af.exe
Resource
win10v2004-20231222-en
General
-
Target
3aaf10f5e7953a5ce274f66fb6bb26af
-
Size
52KB
-
MD5
3aaf10f5e7953a5ce274f66fb6bb26af
-
SHA1
532ed36ca786572cd234b663939ebdb229214c33
-
SHA256
7fc42089421f100306b85147524f27dfe86ff937f0445fd3ce07b50a4c60fc62
-
SHA512
6a00d07d415b63aa53e5c3fd4b3ade5399d7a96125157b61a453ba9fac0b2432602c0172704466d1538cff138bfe5ce2803bcca790b9ba74af83b9b306836532
-
SSDEEP
768:ZMh7TzTBDiifTeiZSVWihwEknh0L7OTLeNfQfZ:OZPnEkh8OTKNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3aaf10f5e7953a5ce274f66fb6bb26af
Files
-
3aaf10f5e7953a5ce274f66fb6bb26af.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ