Static task
static1
Behavioral task
behavioral1
Sample
a18d63267bcee4af25ecd1738af6d44d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a18d63267bcee4af25ecd1738af6d44d.exe
Resource
win10v2004-20240221-en
General
-
Target
a18d63267bcee4af25ecd1738af6d44d
-
Size
717KB
-
MD5
a18d63267bcee4af25ecd1738af6d44d
-
SHA1
712d8585bbe04424bd9a9ccb99b47c55ae70b673
-
SHA256
b22e61463ece9a5e0fbbd585b57a53dcc86196963a542f7e2319c099ccab9a5d
-
SHA512
c65787e3f666b3f118ea86cb5be5b3786d459e8d8723f2e9c43a7c6f367b01bb281d122081be2a47a8621e4935c8f1d1fa096255fd340796847bf939f58ce738
-
SSDEEP
12288:EXICdNLcDtf+8gyUh4schbecWNflC56yjT61HD7KzC0EVzduglFj6C:0nd6DjTaLchbeckflRyjTsEazdugh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a18d63267bcee4af25ecd1738af6d44d
Files
-
a18d63267bcee4af25ecd1738af6d44d.exe windows:4 windows x86 arch:x86
9d168dfc099f58b3be1e413b19b89831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
HeapReAlloc
SetEvent
WaitForSingleObject
HeapWalk
FindAtomA
VirtualProtect
CompareFileTime
ResetEvent
GetModuleHandleA
TlsFree
GetVersion
GetACP
GetProfileIntA
GetConsoleCP
LoadLibraryExA
GetAtomNameA
CloseHandle
GlobalUnlock
lstrlenA
InterlockedExchange
user32
LoadIconA
DialogBoxParamA
EqualRect
PostQuitMessage
InsertMenuA
InflateRect
GetSubMenu
GetScrollRange
GetMenuStringA
UpdateWindow
GetWindowTextA
CreateCaret
SetPropA
CopyRect
GetMenu
EnableScrollBar
DispatchMessageA
ShowWindow
SubtractRect
ModifyMenuA
GetWindowLongA
SetWindowPos
GetDlgItem
TranslateMessage
PostMessageA
MessageBoxA
DestroyMenu
GetKeyboardLayout
PaintDesktop
msi
MsiDoActionA
MsiEnumClientsA
MsiGetMode
MsiEnumProductsA
MsiCloseHandle
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ