Static task
static1
Behavioral task
behavioral1
Sample
a0b43a005fa8de114ac7cad9bae2d34a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a0b43a005fa8de114ac7cad9bae2d34a.exe
Resource
win10v2004-20240221-en
General
-
Target
a0b43a005fa8de114ac7cad9bae2d34a
-
Size
992KB
-
MD5
a0b43a005fa8de114ac7cad9bae2d34a
-
SHA1
727ef272a734bf6dbff8049bc71079c5ff460ead
-
SHA256
e04e3ba893b15f0b92a2ac40860b3ee2f7ff9cfeb6d40bd2b3a8a68ed30ec57e
-
SHA512
8afb375c6eb8e41537bb06367bd48c2922a0e008e3c425c2ff0ae5132a357ba3d005eaf6b1bee7751bac5e91cb58e6d1ab5283c1240ea3e04ec1d0d578106828
-
SSDEEP
24576:XVi2/w83i3Ap4at0kQLLyTmX5MJIY1/chdl3pAvyAsaVu5I:X03ApPvSLyaX4jK33SGaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0b43a005fa8de114ac7cad9bae2d34a
Files
-
a0b43a005fa8de114ac7cad9bae2d34a.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxckppvp Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ubvabwjy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE