Static task
static1
Behavioral task
behavioral1
Sample
a173a71cd74fd5a831ea593e24e574a4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a173a71cd74fd5a831ea593e24e574a4.exe
Resource
win10v2004-20240221-en
General
-
Target
a173a71cd74fd5a831ea593e24e574a4
-
Size
48KB
-
MD5
a173a71cd74fd5a831ea593e24e574a4
-
SHA1
9a278eb9aa3fd77c7e7d0bb49864cb8c873e0bee
-
SHA256
c6402dabc5046537345887e9c349f025c8e459c78ac6d4841cf01458c6c00a61
-
SHA512
159e3ec6ff40667c382044e930309e79f3a5159d0f57e83abab8c0954969de493a374f5087a2574bdf5691e1e74bc03d7536c5ab7d4b70b6c5244fe1971999ee
-
SSDEEP
192:jpjS54vNy+UFGqWzH3CJJwB8tv/PRTGz+uVlLY7ZGh9IBcCyn3W/+:jpjSQN8FvWzH3CJJYOf1qLY7XcRW/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a173a71cd74fd5a831ea593e24e574a4
Files
-
a173a71cd74fd5a831ea593e24e574a4.exe windows:4 windows x86 arch:x86
838b4a6a04d5226ea4927e511e68d22f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
_initterm
_exit
_except_handler2
_amsg_exit
_XcptFilter
exit
_aexit_rtn_dll
__GetMainArgs
atol
strtok
_acmdln_dll
_commode_dll
_fmode_dll
user32
GetMessageA
SendMessageA
CreateDialogParamA
RegisterClassA
LoadCursorA
LoadIconA
IsDialogMessageA
DispatchMessageA
TranslateMessage
GetDlgItem
GetWindowRect
ScreenToClient
ShowWindow
SetForegroundWindow
DestroyWindow
GetWindowTextA
SetWindowTextA
LoadStringA
PostQuitMessage
DestroyIcon
DefWindowProcA
LoadBitmapA
LoadImageA
SendDlgItemMessageA
wsprintfA
ReleaseDC
GetDC
SetDlgItemTextA
KillTimer
WinHelpA
SetWindowPos
SetTimer
kernel32
lstrlenA
GetTickCount
DeviceIoControl
GetModuleHandleA
FormatMessageA
LocalFree
lstrcpyA
WaitForSingleObject
CloseHandle
gdi32
DeleteObject
SelectObject
GetTextExtentPoint32A
shell32
Shell_NotifyIconA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 4KB - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ