Static task
static1
Behavioral task
behavioral1
Sample
hacha.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
hacha.exe
Resource
win10v2004-20231215-en
General
-
Target
hacha.exe
-
Size
80KB
-
MD5
322c314ead5debe98d9a7e8387c8e6bd
-
SHA1
ef98a9c337a2cf42e84d06d8ee49e2197a2a6178
-
SHA256
c39348d3d1f1177edbf56eba0dafe5d928a11f1763107e2f2ad5dbb5f4377d37
-
SHA512
438765d08fe2284cb6cd5037fa943436fc31cea41706a6c6b0cfe1da2f7fe0cdde615c6330998c8fc527fd11f25ff7ae2ce02ccbee4e3d0a1e09d9e3764960b1
-
SSDEEP
1536:nLzYxI80dyYnVIjnZitsXG2F0sUZ8k/ciwcmm4cR7WCtdKfZyvZhQb8/mVJ:3cb0dyIikuXGmU62wcm2R7WCfyyvQbKu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hacha.exe
Files
-
hacha.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 67KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE