Static task
static1
Behavioral task
behavioral1
Sample
a2a036466abed0cf90aa1fba6494af62.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2a036466abed0cf90aa1fba6494af62.exe
Resource
win10v2004-20240221-en
General
-
Target
a2a036466abed0cf90aa1fba6494af62
-
Size
196KB
-
MD5
a2a036466abed0cf90aa1fba6494af62
-
SHA1
04bac2715f031010937ce7f2642a09a53b3d7eca
-
SHA256
e79264362ad1cffe6207b0b5d594b281c8f7ff830391d39ba59f8f72cec9e3cf
-
SHA512
fa49710301c1863cbd21061f712330fbe576070702cb321acdab79b8e2c8587cec956b877a27b5c2d00d0f952ab053e8a3fd110b6c04acd582a466817478d5a8
-
SSDEEP
3072:OvuRuTGctGBGp1fn1JINh1WRxLN5iN9OXKnsLSHt6Yn0RolRRo9a5Paow6FikyQ8:Ovsu6c1p1fTINqkts+HfooZoiE6Z8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2a036466abed0cf90aa1fba6494af62
Files
-
a2a036466abed0cf90aa1fba6494af62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.9k4ote Size: 1KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.79$v7i Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mw4m$2 Size: - Virtual size: 11.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oz7i9e Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.q5sin$ Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 3.0MB
.null Size: - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 194KB - Virtual size: 196KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE