Static task
static1
Behavioral task
behavioral1
Sample
a1cca684e9f6356017815c26a43a475f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1cca684e9f6356017815c26a43a475f.exe
Resource
win10v2004-20240221-en
General
-
Target
a1cca684e9f6356017815c26a43a475f
-
Size
50KB
-
MD5
a1cca684e9f6356017815c26a43a475f
-
SHA1
688d863913337f89a8854c4de0f6c9ef935f9477
-
SHA256
498ff693c5bd284c9edfe6d4c738d85b7bfa61d728c6517eedd742d89f26cc27
-
SHA512
df361a364af7a1b31d8a9bb29514fc7290f6a8900efc3c8c8bece6ed06d4610b2ae852993e7f17781976bc3a418702687ac7ead4b11420b6e66e1db72ee9d9e3
-
SSDEEP
768:hAQfXpteVXIbiDTTyuBHGYOPk1hMFo1mu9iKTFyIjfaSHkVEdULrEo1:uueVXOiHT5tf8k1qForV5yIjiSHr6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1cca684e9f6356017815c26a43a475f
Files
-
a1cca684e9f6356017815c26a43a475f.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE