Static task
static1
Behavioral task
behavioral1
Sample
a1f497d103a3e8d3e6ecf027e98ce2bd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1f497d103a3e8d3e6ecf027e98ce2bd.exe
Resource
win10v2004-20240221-en
General
-
Target
a1f497d103a3e8d3e6ecf027e98ce2bd
-
Size
93KB
-
MD5
a1f497d103a3e8d3e6ecf027e98ce2bd
-
SHA1
44ba822fa8ad321e070155b081b946429f40f349
-
SHA256
13d3b9fb432069bc671f8b934993421459012a929a98ab96ab2860e4147818de
-
SHA512
8c3c89c8e02acabe6e3cb847bafed990cefebd8a05091c4361beb43db95bd0781009c0601757203f8be34c8098ca08e1749b053c4ba55702cf8e5c10d9291153
-
SSDEEP
1536:DdJrJihfQxtQg1nhFc9pJpk+tCwmg+Q6buWkJ2/tnJs1vHMpUv/rP:J54QxjJGJpTP65vFYMperP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1f497d103a3e8d3e6ecf027e98ce2bd
Files
-
a1f497d103a3e8d3e6ecf027e98ce2bd.exe windows:4 windows x86 arch:x86
481560e37c8a58c9605353c8ddcd4a8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObjectEx
WaitForSingleObject
GetProcAddress
LoadLibraryA
user32
GetClassWord
SetScrollPos
SendMessageA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 286B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE