Static task
static1
Behavioral task
behavioral1
Sample
ad372599b6b021c58b3730959c42bb40.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad372599b6b021c58b3730959c42bb40.exe
Resource
win10v2004-20240226-en
General
-
Target
ad372599b6b021c58b3730959c42bb40
-
Size
392KB
-
MD5
ad372599b6b021c58b3730959c42bb40
-
SHA1
146739f8fa6e8f9b0c16c402f7ddb42a8e04d735
-
SHA256
aa91897d7ac56ab733d625b7c7f6e64d3ffc5fa355771b8bf894b0fbb8b6d6b7
-
SHA512
c36ceab06459bdc931315d65484d3f65c514ab6e39d903dd6a4faad0fb33341ae9ad0f0f3c154fee4c239e1e75402d45f82d604b23192a360c066a2039235ddb
-
SSDEEP
12288:2GGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw5qQ:2GGEdwORVb4iiX2tzGyG2oyt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad372599b6b021c58b3730959c42bb40
Files
-
ad372599b6b021c58b3730959c42bb40.exe windows:4 windows x86 arch:x86
1024cb8fb7352a8e492f4c7cedec1706
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GlobalUnlock
GetModuleHandleA
HeapCreate
GetConsoleAliasA
GetCalendarInfoA
GetACP
FindClose
WaitForSingleObjectEx
GetConsoleCP
CreateFileA
Sleep
GetLastError
TlsGetValue
FreeEnvironmentStringsA
LocalLock
CreateFileMappingA
FindAtomA
LocalFree
LoadLibraryExA
user32
GetDlgItem
DispatchMessageA
DrawTextA
GetMessageA
CascadeWindows
DrawEdge
GetIconInfo
IsWindow
SetFocus
CallWindowProcA
GetDC
DefWindowProcA
CreateDialogParamA
MessageBoxA
msasn1
ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncLength
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ