Static task
static1
Behavioral task
behavioral1
Sample
a7896f4acdaa6e89d2351541a040f7fa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a7896f4acdaa6e89d2351541a040f7fa.exe
Resource
win10v2004-20240226-en
General
-
Target
a7896f4acdaa6e89d2351541a040f7fa
-
Size
172KB
-
MD5
a7896f4acdaa6e89d2351541a040f7fa
-
SHA1
0fc532e683c8f1710cd477e12d065d47ec2e7502
-
SHA256
042c641a9cd8a0aa6b77a458a254218ace0761380af0aec0ae912b9cad84af89
-
SHA512
78ff73998d19d2f626e9d21538f61aabf382386ca91204066b090411ad3bd2e343f693f22e3f0c1843409d8cfdcac10e3b38604ffef921e3834c25c81e6adf0e
-
SSDEEP
3072:ZwpbuzMguQ+1FeLdoiBdeBYArfVul6TvfOYtctQ7ZcI:ZwZsMr1FeLKMAQQ/ctQ7ZN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a7896f4acdaa6e89d2351541a040f7fa
Files
-
a7896f4acdaa6e89d2351541a040f7fa.exe windows:4 windows x86 arch:x86
6b698ee98202b3571edce9f1db27f0bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
user32
SetWindowLongA
CreateWindowExA
wsprintfA
CloseWindow
CharLowerBuffA
advapi32
RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
Sections
.text Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ