Static task
static1
Behavioral task
behavioral1
Sample
0a3eb3418650c4eb8740a84d02eb9e064254e9ea1b64bb2e1774cfcc574baf8e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a3eb3418650c4eb8740a84d02eb9e064254e9ea1b64bb2e1774cfcc574baf8e.exe
Resource
win10v2004-20231222-en
General
-
Target
0a3eb3418650c4eb8740a84d02eb9e064254e9ea1b64bb2e1774cfcc574baf8e
-
Size
5KB
-
MD5
9a1e5722e5afd87c78bb27d8d090827a
-
SHA1
2b5ed32995fdfc45c2cc93fd9c8016404bacfaca
-
SHA256
0a3eb3418650c4eb8740a84d02eb9e064254e9ea1b64bb2e1774cfcc574baf8e
-
SHA512
0be81353bf95bce0be726c0156f2fc6bbe71a56587be0799f60baf3716ae46f9a6eb734eb1f07bf13ec4f89a7791f13ebfdac4862e77e8b2d1b72b1eef024069
-
SSDEEP
48:SalXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t7RuqSxp:7WLkFfNnOKYloIQ2pm2pbYSJxE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0a3eb3418650c4eb8740a84d02eb9e064254e9ea1b64bb2e1774cfcc574baf8e
Files
-
0a3eb3418650c4eb8740a84d02eb9e064254e9ea1b64bb2e1774cfcc574baf8e.exe windows:5 windows x86 arch:x86
7c5f9b19847a4e36080308f0e2c5add5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 538B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ