Static task
static1
Behavioral task
behavioral1
Sample
a2626983cb8eae8b6b319aaf68947c1b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2626983cb8eae8b6b319aaf68947c1b.exe
Resource
win10v2004-20240221-en
General
-
Target
a2626983cb8eae8b6b319aaf68947c1b
-
Size
1.6MB
-
MD5
a2626983cb8eae8b6b319aaf68947c1b
-
SHA1
0089a65549e2bde0d00a7ecfa49f12ef748119c4
-
SHA256
9383713b3ac0050ea9ed6f44fbe3de2e796e83c7caf1cd7a63a77825b6025a25
-
SHA512
d31be6613796f565b2d18a84683de10ec9e124c3ba618d4b74f5c37aeb6c5d089ddb4d95d0fb22b7e77a6264269517dd8d5d5d06d373b171db53b47c85e0600e
-
SSDEEP
24576:dGQ2allSDKahOHXzDXzrO96NL05qoEdq8FdH57yhy+k5eBbzrtYEfVILxfe+c:ZNllSDKD3vHeLc3df0hTk5IjCEuFxc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2626983cb8eae8b6b319aaf68947c1b
Files
-
a2626983cb8eae8b6b319aaf68947c1b.exe windows:4 windows x86 arch:x86
2b40c15877f6569270f8adc3bdd23681
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
rpcrt4
UuidCreate
shlwapi
GetAcceptLanguagesW
PathAppendW
UrlCreateFromPathW
PathIsRelativeW
PathFindExtensionW
PathRemoveFileSpecW
UrlUnescapeW
PathCreateFromUrlW
StrCmpIW
PathCombineW
kernel32
FindNextFileW
FindAtomW
LoadLibraryExA
GetPrivateProfileStringW
LoadLibraryW
GetProcAddress
GetModuleHandleA
GetCurrentDirectoryW
GetSystemInfo
SetFileAttributesW
HeapFree
ExpandEnvironmentStringsW
FindClose
LoadLibraryExW
EnumResourceLanguagesW
HeapAlloc
lstrlenA
GetWindowsDirectoryA
FreeLibrary
WaitForSingleObject
lstrcmpiW
CopyFileW
GetSystemDirectoryW
FindFirstFileW
GetPrivateProfileIntW
GetConsoleCursorMode
GetProcessHeap
GetModuleHandleW
WritePrivateProfileStringW
ReleaseMutex
CreateMutexW
LocalFree
GetCurrentProcessId
GetCurrentProcess
Sections
.text Size: 812KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 840KB - Virtual size: 839KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ