Static task
static1
Behavioral task
behavioral1
Sample
a1bd74c98b52204cbdc7603d0e4d8719.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1bd74c98b52204cbdc7603d0e4d8719.exe
Resource
win10v2004-20240221-en
General
-
Target
a1bd74c98b52204cbdc7603d0e4d8719
-
Size
46KB
-
MD5
a1bd74c98b52204cbdc7603d0e4d8719
-
SHA1
dfa59044cfe020dcf12f0de90664d8268e2fec42
-
SHA256
a9619eba64c4c280e281e51668f9644bc0192a996cb4190363c6cd84c7d853f2
-
SHA512
1a987ef4d7f84efcd03d4795b530b07785de2b84f4748d790d8c9ba68c41965e3c6c7c8efb251f71ef63ada83548955c56789f9123cf5a9c1787563076ace94a
-
SSDEEP
768:B+sWrF3FhfNoWgvZY/wpKwghYnpC8PhavLmLPVfO3rkKFPAc6n6:B+tJ3VBIal8JaDOObkKec66
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1bd74c98b52204cbdc7603d0e4d8719
Files
-
a1bd74c98b52204cbdc7603d0e4d8719.exe windows:5 windows x86 arch:x86
148e0e4f5a656e5e52d5fb0a354d70df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
DeleteFileW
FindClose
LocalReAlloc
GetFileInformationByHandle
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultUILanguage
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetModuleHandleA
GetStartupInfoA
CreateFileA
lstrcatA
GetEnvironmentVariableA
HeapSetInformation
TerminateProcess
GetACP
GetSystemTimeAsFileTime
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ