Static task
static1
Behavioral task
behavioral1
Sample
a9d013a3432addee4dbeb377d70fba58.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9d013a3432addee4dbeb377d70fba58.exe
Resource
win10v2004-20240226-en
General
-
Target
a9d013a3432addee4dbeb377d70fba58
-
Size
103KB
-
MD5
a9d013a3432addee4dbeb377d70fba58
-
SHA1
c7c8fc459c2152821bd4d208f2f7291e46e6deab
-
SHA256
c7a5a65a62908468616c558fceea2dc535b69a6dc31c8218461105dc8887a6bb
-
SHA512
fd6b05e0f298afd380f5ba6c9dc3efb589df7b282afb1ab024679b4ff81c0ddceaf795b1ce645b728081c24674c0e274ad00e14dd9217dd6887639c5ea14439a
-
SSDEEP
1536:KEPNB+2UZKo80FMCFR23cp/Zt4pdoMrpa7mcoIXaEYgdOoYqRSBir:/WZKo80FMCFR23cpP4PoM2mcoIXaTU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9d013a3432addee4dbeb377d70fba58
Files
-
a9d013a3432addee4dbeb377d70fba58.exe windows:4 windows x86 arch:x86
0b16fd4561d4e0350979109a449ed90e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
GetSystemDirectoryA
GetTimeZoneInformation
lstrcmpiA
WriteFile
GetLocaleInfoA
GetCommandLineA
WideCharToMultiByte
HeapCreate
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
GetLastError
ReadFile
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
CreateDirectoryA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetOEMCP
GetACP
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
GetCPInfo
WaitForSingleObject
CreateProcessA
GetProcAddress
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetEndOfFile
LCMapStringA
LCMapStringW
GetFileAttributesA
GetExitCodeProcess
advapi32
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE