Static task
static1
Behavioral task
behavioral1
Sample
a4586170ebd23bd6d1b8508d33361467.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a4586170ebd23bd6d1b8508d33361467.exe
Resource
win10v2004-20240221-en
General
-
Target
a4586170ebd23bd6d1b8508d33361467
-
Size
292KB
-
MD5
a4586170ebd23bd6d1b8508d33361467
-
SHA1
2a25d64bbc13a89973dc3e448b0817744c26e555
-
SHA256
d8fd17e584de9515ad0576114f2c1d3cd8b4c740b02b9d8c657789ef08363fed
-
SHA512
a0ac80cc70e0738ce0a78e0d8adb1c602762aa54008d35ee08210927e226a4674f099178d2334a496ad69e498450b44ede6a511dea96b0a0e932529d6eae5e3c
-
SSDEEP
6144:/o2cV9ifbWvUyrzSuzES0LD7O1t0Fq9TZYNAYLSv:/o9iS3WuzES037O4Fq9qSMK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4586170ebd23bd6d1b8508d33361467
Files
-
a4586170ebd23bd6d1b8508d33361467.exe windows:4 windows x86 arch:x86
9e3f3ccebace1e6c18fe30cda9577c75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseSemaphore
FileTimeToLocalFileTime
GetComputerNameA
SetCalendarInfoA
GlobalUnfix
GetSystemTimes
GetLogicalDriveStringsA
CompareFileTime
GetVersionExA
QueryPerformanceCounter
GetLogicalDrives
GetFullPathNameA
GetNumberFormatA
GetNamedPipeHandleStateA
LZCloseFile
FreeResource
IsBadWritePtr
GetModuleHandleA
GetCommModemStatus
WriteConsoleA
GetDefaultCommConfigA
GetThreadTimes
GetCurrentThread
CloseConsoleHandle
GetDllDirectoryA
UnregisterConsoleIME
SetFilePointer
GetCommandLineA
LockFile
_lcreat
OpenEventA
IsBadReadPtr
PulseEvent
GetConsoleAliasA
SetConsoleInputExeNameA
HeapCompact
GetFileTime
VirtualAlloc
GetWindowsDirectoryA
GetConsoleCursorInfo
FillConsoleOutputCharacterA
GetProcessWorkingSetSize
GetDiskFreeSpaceExA
SetEnvironmentVariableA
SetThreadUILanguage
GlobalAlloc
GetCurrentThread
GetConsoleTitleA
SetComputerNameExA
GetThreadPriority
ResumeThread
OpenJobObjectA
GetDiskFreeSpaceA
TransmitCommChar
SetComputerNameA
_lwrite
GetTempPathA
SetConsoleFont
IsSystemResumeAutomatic
FlushFileBuffers
GetSystemDefaultUILanguage
EscapeCommFunction
AddAtomA
GetConsoleAliasExesA
CancelWaitableTimer
GetVersion
wininet
FtpSetCurrentDirectoryW
FtpSetCurrentDirectoryW
winmm
timeGetTime
timeGetSystemTime
Sections
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 280KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ