Static task
static1
Behavioral task
behavioral1
Sample
a1e2e18ba79d431c3bc5528966f3ea03.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1e2e18ba79d431c3bc5528966f3ea03.exe
Resource
win10v2004-20240221-en
General
-
Target
a1e2e18ba79d431c3bc5528966f3ea03
-
Size
1.2MB
-
MD5
a1e2e18ba79d431c3bc5528966f3ea03
-
SHA1
75dc3615dcc1c3c66561abc85ddcfeb6086e945b
-
SHA256
15280cd4014593fc897a65987d0c1bc257bbe1cac63e0d6e593f0fbd9560e897
-
SHA512
865b7fa8ddd6119fae1ae65a2b7c92838295b12b6d94ae128bfd49279d4fe4d6d43bdf7312cb5990c2963bd3dd598427b97e15d330a60bebc52dab2145d5d360
-
SSDEEP
24576:iCFApDx0zxwQ+j7It1YDb2LTitUQz+SKdxV+yukbYxYv56WkCWS3Svq21CqR:hUxeP+jEt1ab2LYz+SKdxV1uoIE6Lrrj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1e2e18ba79d431c3bc5528966f3ea03
Files
-
a1e2e18ba79d431c3bc5528966f3ea03.exe windows:5 windows x86 arch:x86
c541fcae117ad65f552ed12590989c6d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertOpenStore
shlwapi
SHGetValueW
imagehlp
ImageGetCertificateData
advapi32
CreateServiceW
ws2_32
WSACleanup
wldap32
ord143
kernel32
GetVersion
GetVersionExW
InterlockedPopEntrySList
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
oleaut32
SysAllocString
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: - Virtual size: 886KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ