Static task
static1
Behavioral task
behavioral1
Sample
a3bcdce0a94ec1c8a7536c6f2257dbdd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3bcdce0a94ec1c8a7536c6f2257dbdd.exe
Resource
win10v2004-20240221-en
General
-
Target
a3bcdce0a94ec1c8a7536c6f2257dbdd
-
Size
117KB
-
MD5
a3bcdce0a94ec1c8a7536c6f2257dbdd
-
SHA1
909c971165bbdcefa13f0dba3ddbc06e2a11116a
-
SHA256
1092ed4c53d32b753b75955f7fcda98ee204f1f51bb1d67d30920b469ae8ad60
-
SHA512
87da4619bd37140e309b511f0fa60887c685d40e8bc9d4116a9daeee83a1bbe785161a4388799cabec53458df6746c406ce73d6906cffbe871330be0a6ae0723
-
SSDEEP
1536:+Ufiw+85C27e+NHx5r53vQLJ1QU0NqlVII:n6w+UC+jNHxF5AJ1QrqfII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3bcdce0a94ec1c8a7536c6f2257dbdd
Files
-
a3bcdce0a94ec1c8a7536c6f2257dbdd.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ