Static task
static1
Behavioral task
behavioral1
Sample
03d2a5f9059e75642c5a43da95b8d78316e16c1f28efc0a98b08a62e731200fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03d2a5f9059e75642c5a43da95b8d78316e16c1f28efc0a98b08a62e731200fe.exe
Resource
win10v2004-20231215-en
General
-
Target
03d2a5f9059e75642c5a43da95b8d78316e16c1f28efc0a98b08a62e731200fe
-
Size
304KB
-
MD5
551985abfca217d0fc3c298f5ed9872e
-
SHA1
ed9c4038dd2aef5a9985f57e69abb41fbf207a57
-
SHA256
03d2a5f9059e75642c5a43da95b8d78316e16c1f28efc0a98b08a62e731200fe
-
SHA512
68862207620d5357fa5b584c46331142b54d6f6c6451677be4af2f673bdd1e9d9cd3b5b6f07954a304afd3ddba7eace35f970bd250fc9a95b4d0d1e61313cc92
-
SSDEEP
6144:jpCA44q9hPaCtb+0oy5QCvbZCYxQPH22:lreC6ijyS4dnU22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03d2a5f9059e75642c5a43da95b8d78316e16c1f28efc0a98b08a62e731200fe
Files
-
03d2a5f9059e75642c5a43da95b8d78316e16c1f28efc0a98b08a62e731200fe.exe windows:4 windows x86 arch:x86
d5e0355f8764c235b38759b860077ceb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32
MessageBoxA
Sections
.text Size: 77KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rxdata Size: 19KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CODE Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 16KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dotfix Size: 176KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE