Static task
static1
Behavioral task
behavioral1
Sample
a318e3c4eb5c89567e02f6b90665f699.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a318e3c4eb5c89567e02f6b90665f699.exe
Resource
win10v2004-20240221-en
General
-
Target
a318e3c4eb5c89567e02f6b90665f699
-
Size
17KB
-
MD5
a318e3c4eb5c89567e02f6b90665f699
-
SHA1
a0b8872b30d9e563a17dc06dc03617519e4fad95
-
SHA256
85aee5f17cccc42026a2a5afc07bf5419891f38c8557721d68093680165747e1
-
SHA512
5cb0f0db8fceb40ea699eeb5603bb9160da9e60c3b2864a4b8ec6c6d3e82f422d4d52485a026510a34d445bd341acc3924339cf331a97d2645423a39353a55f4
-
SSDEEP
192:6GpdKjtiknbkiq2+DDDNb6Jy+6KDzInYha1G+21lHlpkemt3BSllbEVDA:FdKhPkm9JVtDzqYE1S1lH3K5BSq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a318e3c4eb5c89567e02f6b90665f699
Files
-
a318e3c4eb5c89567e02f6b90665f699.exe windows:4 windows x86 arch:x86
f9b1ec637da8210f432c1fb7c1a854b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetVersion
LoadLibraryExW
HeapCreate
HeapReAlloc
CloseHandle
GetTickCount
GlobalUnlock
WaitForMultipleObjects
GetModuleHandleA
GetSystemDefaultLangID
AddAtomA
WaitForSingleObject
GetStdHandle
GetConsoleCP
lstrlenA
GetProfileIntA
GetCommandLineA
VirtualProtect
CompareFileTime
SuspendThread
user32
CopyRect
DestroyMenu
GetDlgItem
EnableScrollBar
FindWindowA
InsertMenuA
GetCursorInfo
CreateCursor
GetKeyboardLayout
SetWindowPos
CreateIcon
DragObject
SetPropA
CreateMenu
MessageBoxA
InvertRect
IsDialogMessage
GetKeyState
CreateCaret
DialogBoxParamA
SetScrollInfo
DispatchMessageA
CopyImage
DrawCaption
advapi32
RegCreateKeyExA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegQueryInfoKeyA
apphelp
GetPermLayers
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ