Static task
static1
Behavioral task
behavioral1
Sample
a1d0c40d0ddb9eac41e0060d139407a6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1d0c40d0ddb9eac41e0060d139407a6.exe
Resource
win10v2004-20240221-en
General
-
Target
a1d0c40d0ddb9eac41e0060d139407a6
-
Size
85KB
-
MD5
a1d0c40d0ddb9eac41e0060d139407a6
-
SHA1
dd7e611ff87afaa292b092b960617105070c6bf7
-
SHA256
72c0f43a4a83140dbf9ff3ae4f7e643853ce09782c84c4fceffa4f14849332e7
-
SHA512
1d615e3f6b4202e2a82482e3e8c42ac891cf8e6ffc17a0a58216487a1a7fd3a80b8bc6432df54817ad0e57daaabdeadb004ddcea4a28f5f6f9a056b67578b320
-
SSDEEP
768:2mf2ENVIZHxcKsw+mqsr/lwuJz+5FdtlfM3a31RV3l3/3c3bIv3r3r3l3F3l313i:2mf2yajsw+mqUSpcAJK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1d0c40d0ddb9eac41e0060d139407a6
Files
-
a1d0c40d0ddb9eac41e0060d139407a6.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
cyrax Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cyrax Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cyrax Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE