Static task
static1
Behavioral task
behavioral1
Sample
a3b7475f705d7d3e26505620250af5ba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3b7475f705d7d3e26505620250af5ba.exe
Resource
win10v2004-20240221-en
General
-
Target
a3b7475f705d7d3e26505620250af5ba
-
Size
81KB
-
MD5
a3b7475f705d7d3e26505620250af5ba
-
SHA1
9ed98076c6b00c82fda8e4beeeb97b4e8d05153b
-
SHA256
e70ca740650db9db824434ed632fd2e3beb89b1f08c64281d8c1ac163ad29608
-
SHA512
ba72168cecd0604682d77b86006ae37bb70fb459e3532db1b6503ba326c6d37473cc7958c5998acf68e1fbc27b8da6a3ca3920199e5927bd31da9fc82bdf7a03
-
SSDEEP
1536:nGrOtv0ZMVXPtcRGl05BGnLz4s+3L1yDPOAFFd/Sqn:GrO8MVF+G05ULn+3LIOA1Sqn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3b7475f705d7d3e26505620250af5ba
Files
-
a3b7475f705d7d3e26505620250af5ba.exe windows:4 windows x86 arch:x86
2fc69e2859c1a747d0e2bff6c51f5fad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WaitForSingleObject
LoadLibraryExA
VirtualProtect
CreateProcessW
LoadLibraryExA
CreateFileA
CreateProcessA
Sleep
TerminateProcess
WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetFileAttributesW
CreateProcessA
Sleep
SleepEx
GetSystemTimeAsFileTime
LoadLibraryExW
WriteProcessMemory
VirtualProtect
WriteProcessMemory
WriteProcessMemory
GetSystemTimeAsFileTime
Sections
.text Size: 72KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ