Static task
static1
Behavioral task
behavioral1
Sample
a2d1e3d9cbb1649b36b293634336d6f4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2d1e3d9cbb1649b36b293634336d6f4.exe
Resource
win10v2004-20240226-en
General
-
Target
a2d1e3d9cbb1649b36b293634336d6f4
-
Size
40KB
-
MD5
a2d1e3d9cbb1649b36b293634336d6f4
-
SHA1
e708834f771f52883f5a0f98c21d554e821d3ec6
-
SHA256
c8f8b45a78cb576d3d3afeb3e5a02dd68729086b3ce4db634374fb3edee83590
-
SHA512
ed9c00f1bdc2fa91bffe6c059a3e062e0f1817a5a152205b34af4b6d4adfec9aca6169ef1cb35bbf66e61a214d7fea418c0af65b5d940e0fddb996ff8f489ce6
-
SSDEEP
384:xoYprsLFt+f5Q75Q+4wTzJldd1m5ahkBQXhRUy4:xoasxtEg5Qm9tRmQXkv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2d1e3d9cbb1649b36b293634336d6f4
Files
-
a2d1e3d9cbb1649b36b293634336d6f4.exe windows:5 windows x86 arch:x86
6ca37e5e41278ceac6bd8157d469b53e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wininet
InternetOpenW
user32
wsprintfW
shell32
ShellExecuteW
Sections
.MPRESS1 Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE