Static task
static1
Behavioral task
behavioral1
Sample
ad65bfe93989107d0e4e5c7e2c8a483b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad65bfe93989107d0e4e5c7e2c8a483b.exe
Resource
win10v2004-20240226-en
General
-
Target
ad65bfe93989107d0e4e5c7e2c8a483b
-
Size
135KB
-
MD5
ad65bfe93989107d0e4e5c7e2c8a483b
-
SHA1
37dd93ff3099d9b9542f89136d66c188a080e9f9
-
SHA256
73fb25acbd3e48e6b0ef86f3664f62a7f578231ccdf51e1252bb43ff0017c580
-
SHA512
39f77390062ab3ab8511b322cfcbec71ee5f682bbb84021dde711c45685fd1dfce3b0e8ce4853a5143186b095e2ba4c2d9ffce18605b4d000cbc9a6fe9a9807d
-
SSDEEP
3072:KyrO4t8Q9zMmCd618lbH5Akfrn7TtbiD1xxHCRvgg:KKO4t8Q97Cd618lbZAY7pbK1CRF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad65bfe93989107d0e4e5c7e2c8a483b
Files
-
ad65bfe93989107d0e4e5c7e2c8a483b.exe windows:4 windows x86 arch:x86
10adf06c3d3a666a17aadc1be020fb72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
GetLastError
FindClose
SuspendThread
InitializeCriticalSection
GetLocalTime
GetStartupInfoA
FreeEnvironmentStringsA
Sleep
LeaveCriticalSection
ReadFile
EnumResourceNamesA
CloseHandle
CreateThread
FindFirstFileW
WriteFile
DeleteCriticalSection
ExitProcess
GetSystemTimeAsFileTime
EnterCriticalSection
SetEndOfFile
SetFilePointer
LoadLibraryA
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 740B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ