Static task
static1
Behavioral task
behavioral1
Sample
a36e2d0346f0e37734bf0013935aeafc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a36e2d0346f0e37734bf0013935aeafc.exe
Resource
win10v2004-20240221-en
General
-
Target
a36e2d0346f0e37734bf0013935aeafc
-
Size
70KB
-
MD5
a36e2d0346f0e37734bf0013935aeafc
-
SHA1
ab8f4228e0dc5b554acec664776dd739443c8584
-
SHA256
81827664737dab75266b6937bc86e2408e19ab2d0fc0a340aa3af741ba436fad
-
SHA512
b60b6fb0d238fdddbad996058d23038a743498ebdb768a98c3c21dcf25979b43da5565bb7b293ade767d46f555bdd12a080e2a80a9edba2e3c6527ea5efcd1c5
-
SSDEEP
1536:zZwPPJN7W62AGywo0jdOlIwZw07OAu9kcJAjMx0+wDCAqQotZS2:2wXo0jc9ZVYkOx09uhJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a36e2d0346f0e37734bf0013935aeafc
Files
-
a36e2d0346f0e37734bf0013935aeafc.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE