Static task
static1
Behavioral task
behavioral1
Sample
a22afc0032f432cffbc534e81629c2dc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a22afc0032f432cffbc534e81629c2dc.exe
Resource
win10v2004-20240221-en
General
-
Target
a22afc0032f432cffbc534e81629c2dc
-
Size
30KB
-
MD5
a22afc0032f432cffbc534e81629c2dc
-
SHA1
a667d6ce2b387a661c57f5692564699dd10a99c3
-
SHA256
764a0285a82d43dc820b39bf98f749e4cccc79efa269ee59e6049e26a070fe99
-
SHA512
0f883579dcc22107ed5ec6eb7353087e3e17671d2b5df37a3a938e68c43f3ed45966a8ce3324529143d018ae888d2c20bd93aa8ee9022facdea88f9b2441280f
-
SSDEEP
384:v5nxOLTar33z5fl3cI//xFAsJ4KvKy8OIPd98Qm1yd2l+e9Nj4evI0tiYAvmGjLR:vRMPqn1lcI//PWKl8HONBvIaiYrGf1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a22afc0032f432cffbc534e81629c2dc
Files
-
a22afc0032f432cffbc534e81629c2dc.exe windows:4 windows x86 arch:x86
b4c89b82b033dd9c32f8ccce59ea1797
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
SetEvent
OpenEventA
GetFileAttributesA
GetTempPathA
GetLastError
WriteFile
CreateFileA
GetLocalTime
FileTimeToSystemTime
GetModuleFileNameA
lstrcatA
WaitForSingleObject
CloseHandle
DeleteFileA
ExitThread
TerminateThread
ResetEvent
WaitForMultipleObjects
lstrcmpA
CreateToolhelp32Snapshot
Process32First
CompareStringA
lstrcpyA
FindResourceA
LoadResource
GetTickCount
GetModuleHandleA
GetModuleHandleW
GetProcAddress
Sleep
GetProcessHeap
PulseEvent
lstrlenA
MultiByteToWideChar
FreeLibrary
CreateThread
CreateEventA
OpenProcess
TerminateProcess
ExitProcess
ReadFile
HeapFree
HeapAlloc
RtlUnwind
user32
SetWindowTextA
AnyPopup
ShowWindow
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
RegisterClassA
CreateWindowExW
DefWindowProcA
PostQuitMessage
DestroyWindow
MessageBoxA
CreateWindowExA
CharToOemA
LoadIconA
FindWindowA
wsprintfW
wsprintfA
EndPaint
GetParent
advapi32
RegCreateKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExW
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue
shell32
ShellExecuteA
SHGetFolderPathA
Shell_NotifyIconA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysAllocString
SysFreeString
wininet
InternetGetConnectedState
HttpQueryInfoA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ