Static task
static1
Behavioral task
behavioral1
Sample
ac300676bafb71dbdc78db4eeda98f5e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac300676bafb71dbdc78db4eeda98f5e.exe
Resource
win10v2004-20240226-en
General
-
Target
ac300676bafb71dbdc78db4eeda98f5e
-
Size
10KB
-
MD5
ac300676bafb71dbdc78db4eeda98f5e
-
SHA1
fa24986d5516b2406d1fc3f70d48104047a5bd5d
-
SHA256
8799819b39d84260caf0cb2cc2be05a25374dfd7a038e8427d7f80107f413827
-
SHA512
aad11f0a2f16d494b42f1a2d3bb8358caf58c0c1a49d18cf3dfaa6c64c3a587592fa64e197c84339fc3bf550f888a7a988684c396b364d1dfe3b2cdc3ea30416
-
SSDEEP
96:+b8ipq8xjGZi1v18LQgw+gmkDyIBKAAGGhG6bGpqivagKeVgK7zM/MHCjrXt4dxQ:+LvAgvSEcoD2AZobU9rpm3+C/mayzGd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac300676bafb71dbdc78db4eeda98f5e
Files
-
ac300676bafb71dbdc78db4eeda98f5e.exe windows:4 windows x86 arch:x86
394a7207075dd7f78500f94e62ab93ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
kernel32
lstrlenA
lstrcpyA
lstrcatA
WriteFile
WideCharToMultiByte
UnmapViewOfFile
Sleep
ReadFile
MultiByteToWideChar
CloseHandle
LocalFree
LocalAlloc
LoadLibraryA
GlobalFree
GlobalAlloc
GetVolumeInformationA
GetVersionExA
GetProcAddress
GetPrivateProfileIntA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileSize
GetCurrentProcess
GetComputerNameA
ExitProcess
CreateFileMappingA
CreateFileA
MapViewOfFile
user32
ReleaseDC
wsprintfA
oleaut32
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
AdjustTokenPrivileges
shlwapi
StrStrIA
wsock32
WSAStartup
send
recv
rasapi32
RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasEnumEntriesA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Sunzer Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE