Static task
static1
Behavioral task
behavioral1
Sample
d3a1301127615101eaa2050c07e0ad43.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3a1301127615101eaa2050c07e0ad43.exe
Resource
win10v2004-20231215-en
General
-
Target
d3a1301127615101eaa2050c07e0ad43
-
Size
169KB
-
MD5
d3a1301127615101eaa2050c07e0ad43
-
SHA1
e5d2e7f999c61f6c61819868329023ada8d05032
-
SHA256
b46954d62df3024b8b894aeeefab18c39964e6a489e398ef1f1a023866bb2695
-
SHA512
d97ebd3fbc94c1cbc480bac1a6fc2cc011ca6239986db339b845e0327b813c13ec459689535f7260c3133cebfa9707101b01dac81813bfc8e5dbbf4d42496e52
-
SSDEEP
3072:VdTQXzon0dRzUIhN59bYAANJ5Ne7sKo5Cwyd7ucvq3XoELNU0048BcTCY7D2xmk:nMDddbYAEQsrDydzS3XG0AWD2xX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3a1301127615101eaa2050c07e0ad43
Files
-
d3a1301127615101eaa2050c07e0ad43.exe windows:4 windows x86 arch:x86
ee831adb14a0ac40bc5a350f146e67f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
urlmon
URLDownloadToFileA
wsock32
WSACleanup
Sections
CODE Size: 159KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE