Static task
static1
Behavioral task
behavioral1
Sample
a37514fdfbb9bf9641b4f82f2b2db267.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a37514fdfbb9bf9641b4f82f2b2db267.exe
Resource
win10v2004-20240221-en
General
-
Target
a37514fdfbb9bf9641b4f82f2b2db267
-
Size
10KB
-
MD5
a37514fdfbb9bf9641b4f82f2b2db267
-
SHA1
a754e519cb4c165801d79ea6b8bd1e9865851f81
-
SHA256
2dc240bcfb245934ee70873ca7cc8e1dbb3a0aeae2f96700a159d1689a83f410
-
SHA512
20039b9b9f1cf61b8a0f91f28e1b92d15cf377b636509e9d493089316edd28cd0b9ddd0e84b7aea420a2f276ce552be7e5d9e2be2c501f90f4f48356cbf0cc11
-
SSDEEP
192:6ojIH7JHRjq8q0ZsdODW5qS45rvOuEJGivZc2L0F:xa7JxjFr6dOa5qVvIJ1Zf8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a37514fdfbb9bf9641b4f82f2b2db267
Files
-
a37514fdfbb9bf9641b4f82f2b2db267.exe windows:4 windows x86 arch:x86
80a93f055559d149c2d27e38444ef67a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
VirtualProtect
CloseHandle
ResumeThread
HeapDestroy
ExitProcess
DeleteTimerQueue
CreateHardLinkA
GetTickCount
GetModuleHandleA
HeapSize
ReleaseMutex
GetStartupInfoA
GetLastError
DeleteCriticalSection
GetTempPathA
GetDriveTypeA
IsValidCodePage
lstrcmpiA
GetConsoleWindow
SetEvent
advapi32
OpenEventLogA
CloseEventLog
CloseTrace
RegEnumValueA
LsaClose
IsValidSid
RegQueryInfoKeyA
IsValidAcl
RegCloseKey
RegQueryValueExA
LsaFreeMemory
RegCreateKeyExA
GetFileSecurityA
RegEnumKeyExA
GetSecurityInfo
FreeSid
AccessCheck
ReportEventA
RegLoadKeyA
LsaSetSecret
wininet
HttpQueryInfoA
HttpSendRequestA
FindCloseUrlCache
DeleteUrlCacheEntryA
DetectAutoProxyUrl
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ