Static task
static1
Behavioral task
behavioral1
Sample
aa0a873b16344fc8b81fa6674e788920fdc026cfc109e75b5768f87c057e2bfa.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
aa0a873b16344fc8b81fa6674e788920fdc026cfc109e75b5768f87c057e2bfa.exe
Resource
win10v2004-20240426-en
General
-
Target
aa0a873b16344fc8b81fa6674e788920fdc026cfc109e75b5768f87c057e2bfa
-
Size
9.1MB
-
MD5
f0909afeba9d275972f30d18b34299ff
-
SHA1
15b1ee1091e5fbfbc1c6799d8362cb7054c67033
-
SHA256
aa0a873b16344fc8b81fa6674e788920fdc026cfc109e75b5768f87c057e2bfa
-
SHA512
27c447eb6109bb0d9f87aa436ec1dae244668fd2d10160b1ea7af53e01686681812a127fae32f88f036ada993199a6fec01639cecc853db22b266c54e1018bd8
-
SSDEEP
196608:RI9/kDldrxRDu2yKE0RlANTXl030PiPGJUSifmQ2:O/kDvrzqbz0oBPPiuJUSQZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa0a873b16344fc8b81fa6674e788920fdc026cfc109e75b5768f87c057e2bfa
Files
-
aa0a873b16344fc8b81fa6674e788920fdc026cfc109e75b5768f87c057e2bfa.exe windows:5 windows x86 arch:x86
387f84cc13884dfd1aed93c3aac88dc3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadImageW
gdi32
GetStockObject
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
SHBrowseForFolderA
comctl32
InitCommonControlsEx
shlwapi
StrFormatKBSizeA
uxtheme
IsAppThemed
ole32
CoRegisterClassObject
oleaut32
VarBstrFromDate
oledlg
ord8
oleacc
LresultFromObject
gdiplus
GdipCreateFromHDC
imm32
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 9.1MB - Virtual size: 11.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE