Static task
static1
Behavioral task
behavioral1
Sample
a0e88eb1e2a4129c74610a0013accfab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0e88eb1e2a4129c74610a0013accfab.exe
Resource
win10v2004-20240221-en
General
-
Target
a0e88eb1e2a4129c74610a0013accfab
-
Size
177KB
-
MD5
a0e88eb1e2a4129c74610a0013accfab
-
SHA1
0ebee9fec5fabadb8dfe52ed1381cae09125eb27
-
SHA256
b644c7d9f5fe0a180121273c422657140a8f50751602b10abf2da0d4f7559f21
-
SHA512
9c7db431dab9cf9d7917cc6b542500437c8b1c5b5362278d6a4bf333631963c01523774bc5a7bf3060a9aa26191a0b90351dc69a5c5228de2614a0280a3da8a7
-
SSDEEP
3072:CYk6dY7ufdC3nYXzowqCvcUzl1g9oGKanMqT7wV05AjNNUeLKDwkD3pVazBdyjid:VDYWCXYXzowqp0rg9LKanMqPwV05YOp2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0e88eb1e2a4129c74610a0013accfab
Files
-
a0e88eb1e2a4129c74610a0013accfab.exe windows:4 windows x86 arch:x86
dc8ca08ce94dbf552f8251ab5b805921
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetSystemDirectoryW
FindResourceW
ConvertFiberToThread
CompareStringA
GetOEMCP
GetCurrentProcess
FindNextFileW
FindClose
SetThreadIdealProcessor
LCMapStringW
LocalFileTimeToFileTime
IsBadReadPtr
EnumResourceNamesW
FreeLibrary
LocalFree
SetCurrentDirectoryW
FileTimeToLocalFileTime
SetEnvironmentVariableW
RegisterWaitForSingleObject
SetErrorMode
LocalAlloc
FileTimeToSystemTime
GetStringTypeW
SystemTimeToFileTime
GetShortPathNameW
LoadResource
FindFirstFileW
GetLocalTime
SearchPathW
user32
ValidateRgn
FlashWindow
IsWindowEnabled
RealGetWindowClassA
SetCapture
UpdateWindow
DestroyWindow
ValidateRect
GetCapture
IsWindow
ExcludeUpdateRgn
ReleaseCapture
EnableWindow
InvalidateRgn
GetUpdateRgn
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ