Static task
static1
Behavioral task
behavioral1
Sample
a8202f8a70a8293c62f2a7fe10d8b1a428842c36d76f5299ee76041e0bbe2118.exe
Resource
win7-20240319-en
General
-
Target
a8202f8a70a8293c62f2a7fe10d8b1a428842c36d76f5299ee76041e0bbe2118
-
Size
1.2MB
-
MD5
040d50a1687412961e3ffa248fffbe5b
-
SHA1
b7320652f37feba0e1f6184a421e636f46f33c50
-
SHA256
a8202f8a70a8293c62f2a7fe10d8b1a428842c36d76f5299ee76041e0bbe2118
-
SHA512
92cbfe7a3e4f73e5bf16c201cbe53afdb40e9d3564e46a4ed90f1a1af75425b42eadef516003e74aeea2d59989c3587115cff20faa3a71aa667290627b30cd14
-
SSDEEP
24576:h2US/bDqmLBq25dwxZVPX8D/erEFyrWCuCJa+mHH7K:h21qiBH0VP2eAnXCJx62
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8202f8a70a8293c62f2a7fe10d8b1a428842c36d76f5299ee76041e0bbe2118
Files
-
a8202f8a70a8293c62f2a7fe10d8b1a428842c36d76f5299ee76041e0bbe2118.exe windows:4 windows x86 arch:x86
b3bfcb6becaf29dba67679770e613826
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord4441
msvcrt
_adjust_fdiv
kernel32
InterlockedDecrement
user32
UpdateWindow
shell32
ShellExecuteA
ole32
CoCreateInstance
oleaut32
CreateErrorInfo
urlmon
URLDownloadToFileA
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
Sections
.text Size: 148KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ