Static task
static1
Behavioral task
behavioral1
Sample
a1b4c9e710f1113807b34846b8575106.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a1b4c9e710f1113807b34846b8575106.exe
Resource
win10v2004-20240221-en
General
-
Target
a1b4c9e710f1113807b34846b8575106
-
Size
20KB
-
MD5
a1b4c9e710f1113807b34846b8575106
-
SHA1
b70704832a719e200f686f4e25c72a27952f68ec
-
SHA256
04cd57b28941ece88e0c3f42bf91cbe45455802b63e755d5a0a1283b249baf0d
-
SHA512
61de7fbe48204a0b1d12cebe5ff7883f84939ea2f141f9eb8cb2fc7130f5cf35a176ac79cac2b0c9d7f84b19b3dc709513be87dfd8872e0644b1941fe0c7767d
-
SSDEEP
384:AggRA4GhX7K1z8pnX7XJXyTrCZ9smVXtAS:wQXu1od7XJXWenltS
Malware Config
Signatures
Files
-
a1b4c9e710f1113807b34846b8575106.exe windows:4 windows x86 arch:x86
41ebb9d0daa0266fd3bf1eb024720ce8
Code Sign
7f:2a:95:8c:02:87:e3:74:b9:f5:52:f3:e6:f7:ae:66Certificate
IssuerCN=QaaqoqeraqiwNot Before02/03/2012, 12:23Not After31/12/2039, 23:59SubjectCN=Qaaqoqeraqiw86:c7:55:a0:dd:4e:5a:95:7e:aa:07:ab:40:32:c6:ed:d6:b8:7b:a4Signer
Actual PE Digest86:c7:55:a0:dd:4e:5a:95:7e:aa:07:ab:40:32:c6:ed:d6:b8:7b:a4Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
ExitProcess
Sleep
user32
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
EndPaint
DispatchMessageA
PostQuitMessage
gdi32
GetObjectA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 238B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ