Static task
static1
Behavioral task
behavioral1
Sample
1a0b36ab3c21ae53b20e9eee760a8c40775514c17bd1cfe3b7dbf702de6bb320.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1a0b36ab3c21ae53b20e9eee760a8c40775514c17bd1cfe3b7dbf702de6bb320.exe
Resource
win10v2004-20240226-en
General
-
Target
1a0b36ab3c21ae53b20e9eee760a8c40775514c17bd1cfe3b7dbf702de6bb320
-
Size
193KB
-
MD5
0b43e62f252df6acf4f39036e59dabff
-
SHA1
ef5d29121a388c6a61573a5c6f5a4d6506be5ffc
-
SHA256
1a0b36ab3c21ae53b20e9eee760a8c40775514c17bd1cfe3b7dbf702de6bb320
-
SHA512
38bba015f37a3dae3702a8c10488695e609fe7b17423711001188bbaffef3f02315b6dcfec295704b6866768577dea1179f1d68198f5f4fe1fd757ac59624076
-
SSDEEP
6144:9v22X4W1nkg26yeRbxBZI9vbD4B5yKI9o:R1nbVxBS9vaneo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a0b36ab3c21ae53b20e9eee760a8c40775514c17bd1cfe3b7dbf702de6bb320
Files
-
1a0b36ab3c21ae53b20e9eee760a8c40775514c17bd1cfe3b7dbf702de6bb320.exe windows:1 windows x86 arch:x86
c5be99196a6c1865f2d20626faa31615
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
kernel32
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
HeapSize
shlwapi
PathAppendA
crtdll
__GetMainArgs
exit
raise
signal
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 748B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 268B - Virtual size: 268B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ