Static task
static1
Behavioral task
behavioral1
Sample
a3f0bcf4aca3c03c8baf7b2f8317db01.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3f0bcf4aca3c03c8baf7b2f8317db01.exe
Resource
win10v2004-20240221-en
General
-
Target
a3f0bcf4aca3c03c8baf7b2f8317db01
-
Size
113KB
-
MD5
a3f0bcf4aca3c03c8baf7b2f8317db01
-
SHA1
e94ef6e1925034528a6e20cd3613123449bd28e5
-
SHA256
79f3158bd949517b6dc276fde33b5956e98596b6af6de35e60f64cf95402302e
-
SHA512
75a74d8bd0dcf87b711ccc6002e0c166bc972a3e196f732881988917ab1f8d0ec007e3c073b46481f968f1525f99fd9db11c1b0fca5143f7ff937dbd4de257c6
-
SSDEEP
3072:9WolHuokkniWy/UHtr5upcB7if2ONsQ90MyY0Q2VSeU:9Wo51nEks2ONnvyY2VSeU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f0bcf4aca3c03c8baf7b2f8317db01
Files
-
a3f0bcf4aca3c03c8baf7b2f8317db01.exe windows:4 windows x86 arch:x86
228a3830cac5334c4716fdea72201ecd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
GetTickCount
LoadLibraryA
user32
DispatchMessageA
TranslateMessage
GetMessageA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ