Static task
static1
Behavioral task
behavioral1
Sample
a026a1c81b6b150ffb76d440614d417d6fefe64e775e505a70f2cedfb2d88f66.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a026a1c81b6b150ffb76d440614d417d6fefe64e775e505a70f2cedfb2d88f66.exe
Resource
win10v2004-20240419-en
General
-
Target
a026a1c81b6b150ffb76d440614d417d6fefe64e775e505a70f2cedfb2d88f66
-
Size
2.4MB
-
MD5
0b8824bbce9c3b86ab47f786d34dd65f
-
SHA1
a308b496bd09cc5c7d1e2152521879bfb7c0614c
-
SHA256
a026a1c81b6b150ffb76d440614d417d6fefe64e775e505a70f2cedfb2d88f66
-
SHA512
308b6aefccae7e4b9c63565195ee192637326d710f9d9eb2877066ce98c009d6a1af8ee84f7ad5c8fcc4f25689173639909c52583033fb72daf7a5dc52cd8b88
-
SSDEEP
49152:K6BmqqALtZtnrtd/nYBg5ntcPLp4Nr2kSFKeuJttxPoeJNZ7bdsjyTTyT:K6BmqqALJnrTvYBgCjAr2bVkttxgW/7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a026a1c81b6b150ffb76d440614d417d6fefe64e775e505a70f2cedfb2d88f66
Files
-
a026a1c81b6b150ffb76d440614d417d6fefe64e775e505a70f2cedfb2d88f66.exe windows:5 windows x86 arch:x86
863ab48aed8c5c5f9dadd7250781275d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
gdiplus
GdipFree
iocptcp
TcpSend
iocpudp
UdpInit
user32
GetDC
gdi32
SaveDC
comdlg32
GetFileTitleA
advapi32
FreeSid
shell32
DragFinish
ole32
CoInitialize
oleaut32
SysFreeString
disklessmultiserver
InitMultiSvr
ws2_32
htonl
iphlpapi
SendARP
version
VerQueryValueA
crypt32
CryptMsgClose
wintrust
WinVerifyTrust
rpcrt4
UuidCreate
imm32
ImmGetContext
comctl32
ord17
dbghelp
MiniDumpWriteDump
shlwapi
PathIsUNCA
wininet
InternetOpenA
psapi
GetProcessMemoryInfo
winhttp
WinHttpOpen
Sections
.MPRESS1 Size: 2.1MB - Virtual size: 15.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE