Static task
static1
Behavioral task
behavioral1
Sample
a095dfcdcd1862c627e01d68783ef832.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a095dfcdcd1862c627e01d68783ef832.exe
Resource
win10v2004-20240221-en
General
-
Target
a095dfcdcd1862c627e01d68783ef832
-
Size
637KB
-
MD5
a095dfcdcd1862c627e01d68783ef832
-
SHA1
889849782aa476aac8b4bf9798a198149c382359
-
SHA256
2e8799fe588359dead4cc2b7be31b3398499c5ccdc3377cb6f91faf179b9f82a
-
SHA512
8906c7754a2c9329a7d31344959ed4aa3d4ab77984b4fe0ea2610ccbf2898d13d96bff866be6c76e937f0dadac565e70dee6de9595ef4f1edced50f0656618ca
-
SSDEEP
12288:E3zQzq+h0/LfW6vNTt+DDw0k3s+qEiDhX1k+UmDIenj0DU9HjKnL+nQDaM:0zQbS/LOLDDfk3/Ck+UmD9YDAHjKnLt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a095dfcdcd1862c627e01d68783ef832
Files
-
a095dfcdcd1862c627e01d68783ef832.exe windows:4 windows x86 arch:x86
ab0c43235243d27074ace3baf4493e49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
WaitForSingleObject
TlsFree
Sleep
GlobalUnlock
CompareFileTime
GetProfileIntA
GetACP
InterlockedExchange
GetConsoleCP
VirtualProtect
GetAtomNameA
CloseHandle
GetTickCount
HeapWalk
SetEvent
FindAtomA
HeapReAlloc
lstrlenA
LoadLibraryExA
GetModuleHandleA
user32
EqualRect
PostQuitMessage
DialogBoxParamA
ModifyMenuA
GetWindowTextA
CreateCaret
InsertMenuA
GetMenuStringA
GetWindowLongA
GetDlgItem
GetMenu
GetKeyboardLayout
ShowWindow
EnableScrollBar
SetWindowPos
PaintDesktop
LoadIconA
DispatchMessageA
PostMessageA
CopyRect
InflateRect
SetPropA
GetSubMenu
TranslateMessage
DestroyMenu
GetScrollRange
UpdateWindow
SubtractRect
MessageBoxA
msi
MsiGetMode
MsiDoActionA
MsiEnumProductsA
MsiCloseHandle
MsiEnumClientsA
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ