Static task
static1
Behavioral task
behavioral1
Sample
a9e675f4798d7a22dcbfec881692a75a3ba2fcf47af01d979a1c0bdc0d426179.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a9e675f4798d7a22dcbfec881692a75a3ba2fcf47af01d979a1c0bdc0d426179.exe
Resource
win10v2004-20240412-en
General
-
Target
a9e675f4798d7a22dcbfec881692a75a3ba2fcf47af01d979a1c0bdc0d426179
-
Size
31KB
-
MD5
6e94364a129f1c3a0ce77ab395ae70b2
-
SHA1
640f872cb576d72a9b93a2cf6306cd56a2ab9476
-
SHA256
a9e675f4798d7a22dcbfec881692a75a3ba2fcf47af01d979a1c0bdc0d426179
-
SHA512
8117d30be82ff5bed3d773bb89cb459080bbc1e92876e9d01f0acfef3162de929b7411a4d6914ae3103b4e6c118eea214c2e59ad31c53c7f3095541c21e96c15
-
SSDEEP
768:qQFGZ2RMT3XdnrmXdiaq6IL0oMAkYYFzlkOzj8JLtuF0UI+ZF/k:qQFGZ3TZSTkOzIUIL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9e675f4798d7a22dcbfec881692a75a3ba2fcf47af01d979a1c0bdc0d426179
Files
-
a9e675f4798d7a22dcbfec881692a75a3ba2fcf47af01d979a1c0bdc0d426179.exe windows:5 windows x86 arch:x86
e547ce7593669d78b55bb099a0e2fc19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA
gdi32
CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
msacm32
acmStreamOpen
acmStreamSize
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegDeleteValueA
RegCreateKeyExA
kernel32
GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetCPInfo
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ