Static task
static1
Behavioral task
behavioral1
Sample
a3ec8d941d2c23352982a27c07a11216.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3ec8d941d2c23352982a27c07a11216.exe
Resource
win10v2004-20240221-en
General
-
Target
a3ec8d941d2c23352982a27c07a11216
-
Size
84KB
-
MD5
a3ec8d941d2c23352982a27c07a11216
-
SHA1
ab96b3f2036726d70c4fabdb368c47ba4eaf84b1
-
SHA256
9937d66c966cab016f4e1f1db1c608192fe7e8b9437557fd262a72fb054efd0e
-
SHA512
9a9100a49e7b2a7347e2335019b89d1ea877fca241359ccc41511cc10350211320520e20813eea207e7c57c6544345e057f733bd257b56cbf1ba1640e35e57c7
-
SSDEEP
1536:2hxkZOJUiBmQ2gfnO/Ni/pIMX6a3pu6gyLpPpPk/6PPRdu35RBpQ:2hZJUQmtd/4CMqa3pu6TdpM/6R0LE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3ec8d941d2c23352982a27c07a11216
Files
-
a3ec8d941d2c23352982a27c07a11216.exe windows:4 windows x86 arch:x86
69e256128851b82e2d8ddca87470e3b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CreateProcessA
ExitProcess
FindAtomA
FindResourceA
FreeConsole
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetSystemTime
GetThreadContext
LoadResource
LockResource
ResumeThread
SetThreadContext
SetUnhandledExceptionFilter
SizeofResource
Sleep
VirtualProtectEx
WriteProcessMemory
msvcrt
__getmainargs
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memcpy
memset
signal
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE