Static task
static1
Behavioral task
behavioral1
Sample
a9ecea87ffc7e2d48e6611f828b044f6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9ecea87ffc7e2d48e6611f828b044f6.exe
Resource
win10v2004-20240226-en
General
-
Target
a9ecea87ffc7e2d48e6611f828b044f6
-
Size
303KB
-
MD5
a9ecea87ffc7e2d48e6611f828b044f6
-
SHA1
5fc89bbd30ba0a68ac3b119cc21ae7662c3b0f96
-
SHA256
64d99725d338c524f7206f87db50a583d6b0c44e55b636d9e7d60e268f0dd4c5
-
SHA512
079fcfd72f0dc59434e48788a628945a456529c4da5cd31bde933b261974793f2281297ab951211af05d765e2b1a6cbe7530acc35972545bdf5d594023176c06
-
SSDEEP
6144:mznkt57c8+pOQPRfGTV/IEQHWAGOVCEAhjtvnGxe2eYd9T/4lKA:mI7v+pOQpuTV/IWAGiCEAhVGo2eA/4d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9ecea87ffc7e2d48e6611f828b044f6
Files
-
a9ecea87ffc7e2d48e6611f828b044f6.exe windows:4 windows x86 arch:x86
7a6045c714ed9d1d3af5469a60f403f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetExitCodeProcess
GetCurrentThreadId
IsValidLocale
ReleaseMutex
DeleteFileA
SetFilePointer
DuplicateHandle
GetModuleFileNameA
FreeLibrary
Sections
SvcSuIrX Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Xtbrecpl Size: 1024B - Virtual size: 590B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qBeopBfP Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SRbnZuPH Size: 265KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE