Static task
static1
Behavioral task
behavioral1
Sample
a1644b42db81a40244509b589f12b9ea.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a1644b42db81a40244509b589f12b9ea.exe
Resource
win10v2004-20240221-en
General
-
Target
a1644b42db81a40244509b589f12b9ea
-
Size
4.3MB
-
MD5
a1644b42db81a40244509b589f12b9ea
-
SHA1
ec508ed95650c8f9167c7356f8de9c4645bacae5
-
SHA256
6c0374e3d3e13860e9b625726af447837e2835b2b2d93cb0d20d1ca9ff20ff6d
-
SHA512
c647964ce8062eed9713d91d1f2daa2336b581459458135bef25283817378870a6effc18a5cb630262aa7399d44780570e22139b9e10ab8b43b5f1d8e9fbbdcd
-
SSDEEP
98304:JI7xU7qyy0J/0AcCyNWLJ7krD8E8qh4QFXpwLT:JvqyJJ/tcH8LCfWQFX8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1644b42db81a40244509b589f12b9ea
Files
-
a1644b42db81a40244509b589f12b9ea.exe windows:4 windows x86 arch:x86
81638d02019c0bfcaaf23a9c69f2f12c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA
user32
wsprintfA
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 533B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12.5MB - Virtual size: 12.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ