Static task
static1
Behavioral task
behavioral1
Sample
a289bb366e796c9d667c168602f5b74c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a289bb366e796c9d667c168602f5b74c.exe
Resource
win10v2004-20240221-en
General
-
Target
a289bb366e796c9d667c168602f5b74c
-
Size
244KB
-
MD5
a289bb366e796c9d667c168602f5b74c
-
SHA1
31f52f84762c7100c1ef96b6351fd3609c635a96
-
SHA256
7538f20985f03ad33069c2e2ad376a3ecb14b60cd8511104923ae79062bf53fe
-
SHA512
d14565bcd1e13fedd75745f714a76d411fa6cd3648e2e103287ecf4d7e8b02585f648a9eee17332ba9703c2485d313b97d8dfbf2b0ce77ad37afb3a1411d8c5d
-
SSDEEP
6144:g2L8sX4ytGQowUPUpWkjjriSkXTODV5hthHey8Mc2ryjvnJSiZ4pBhfm:g2oc4yFSk3BkoVHHrqCylSiZA3fm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a289bb366e796c9d667c168602f5b74c
Files
-
a289bb366e796c9d667c168602f5b74c.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 952KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE