Static task
static1
Behavioral task
behavioral1
Sample
ac718b57b0fad29aac59203e7755311d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac718b57b0fad29aac59203e7755311d.exe
Resource
win10v2004-20240226-en
General
-
Target
ac718b57b0fad29aac59203e7755311d
-
Size
232KB
-
MD5
ac718b57b0fad29aac59203e7755311d
-
SHA1
f22f726e3850308c84b9944f9581d42d65b6c299
-
SHA256
dc9e8500c22fef77951f01310630917d3346565e587573f9442b95d3449956b8
-
SHA512
baf876f301ae45d7f5c952782f180b646fc4ead4915592fb6f01267c4df728ba05ebaf5cf1e21b73e11c0195de7d040044e31cb0a4fe4323017a6ebcbd0608d1
-
SSDEEP
6144:P5LYyFK3U+9tyoZ/CLJZjNAKJkm9lTr34qjzKblg4yw:P5EyFbw9Z/KNa+p4qjElvd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac718b57b0fad29aac59203e7755311d
Files
-
ac718b57b0fad29aac59203e7755311d.exe windows:4 windows x86 arch:x86
ce46e0221894150907826efc164c68c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
shell32
ExtractIconA
wininet
InternetSetOptionA
urlmon
CoInternetCreateZoneManager
Sections
CODE Size: 216KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE