Static task
static1
Behavioral task
behavioral1
Sample
a34d5fe6728759ad035fb285e6a5c731.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a34d5fe6728759ad035fb285e6a5c731.exe
Resource
win10v2004-20240221-en
General
-
Target
a34d5fe6728759ad035fb285e6a5c731
-
Size
26KB
-
MD5
a34d5fe6728759ad035fb285e6a5c731
-
SHA1
6e59561ed9c7f3fa427ac5bfb2853453fc0ee721
-
SHA256
473138fb5f5946ee8a007b59ba72fd947ad9a9198a5957df026f1a55b438c857
-
SHA512
7b91ebfa9fe84348e69a46b3d18a768b67f1c856f1935eddf0892d7fe476d318c5bd7d7f7bfe51c638be5dc89d9a9282c3a1aeff15426a3ee5623dc9dcc5d902
-
SSDEEP
384:uZ9R9GFWyh5HxQ43bgAhEmzdC4T8/g8i6nRuzMI84i6rnmg7Sl1:+R9GYyhvDbBhEmZCWEg8H6ou/w1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a34d5fe6728759ad035fb285e6a5c731
Files
-
a34d5fe6728759ad035fb285e6a5c731.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE