Static task
static1
Behavioral task
behavioral1
Sample
a0d48a1ec535d8cbca035c6f66d64b7a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0d48a1ec535d8cbca035c6f66d64b7a.exe
Resource
win10v2004-20240221-en
General
-
Target
a0d48a1ec535d8cbca035c6f66d64b7a
-
Size
102KB
-
MD5
a0d48a1ec535d8cbca035c6f66d64b7a
-
SHA1
b8a7478375c85d808a2a80a098c35372438144c0
-
SHA256
c61f2029706a44b624b53e3b307faf140afb0e5eacf734c369cdda4995adc5e9
-
SHA512
27a524f08eada85383817ab8ec8148d0a13387de92661c4db95d8a681a8c27fd86076092200ed75cb29112a6692536f32f53c33af4f4ab1b96d6c83bd6215058
-
SSDEEP
1536:EmVAm65yQHtCN5WBlZHG39KUVB+xS2p7mW7E4/1678PKs66zDsejdQDlEQphuJ:Im65ftCN8BlV3U/+xSwdEsTCs6LeMb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0d48a1ec535d8cbca035c6f66d64b7a
Files
-
a0d48a1ec535d8cbca035c6f66d64b7a.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 95KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE