Static task
static1
Behavioral task
behavioral1
Sample
a7fb70cab3e301321f10cf70b6ebf7cf.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a7fb70cab3e301321f10cf70b6ebf7cf.exe
Resource
win10v2004-20240226-en
General
-
Target
a7fb70cab3e301321f10cf70b6ebf7cf.bin
-
Size
41KB
-
MD5
a7fb70cab3e301321f10cf70b6ebf7cf
-
SHA1
e905518962d0ba76e14cd42da8cfa7117dfff1c8
-
SHA256
05536267aea68e60165091e5602cfcc6e2b919daab5a0464b458297e0a2df67b
-
SHA512
62905dd06579812f6de3e2534b644d4a09e78fbf5e82e22a9b2e4af227bb0459565af84675736a94be652dbd140ee233e20e58355995ef136949dc4dd884cf01
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZrCt:btB9g/WItCSsAGjX7e9N0hunrkna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7fb70cab3e301321f10cf70b6ebf7cf.bin
Files
-
a7fb70cab3e301321f10cf70b6ebf7cf.bin.exe windows:5 windows x86 arch:x86
a2bfa209044e11b72a41f731968fdff2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA
kernel32
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA
gdi32
CreateFontIndirectA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ