Static task
static1
Behavioral task
behavioral1
Sample
a95cbece062ac935ebf0235bc31483bf40e60000edad94c7b5ddc616cd8a4a09.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a95cbece062ac935ebf0235bc31483bf40e60000edad94c7b5ddc616cd8a4a09.exe
Resource
win10v2004-20240426-en
General
-
Target
a95cbece062ac935ebf0235bc31483bf40e60000edad94c7b5ddc616cd8a4a09
-
Size
1.1MB
-
MD5
22077511933a62b4d5a3558a282e9ea0
-
SHA1
5ae42ab9bcf03c3d46668d3d91805249f43795c1
-
SHA256
a95cbece062ac935ebf0235bc31483bf40e60000edad94c7b5ddc616cd8a4a09
-
SHA512
4319b9dbf36b7f3895781a2a4155c439630066e5bf8d9f63d561c14c1347bc3f0025ee0ab411779f8db2b7e95bfb48c770b09f11626627d5b472670ea7f328c6
-
SSDEEP
24576:MezFgbT4/ONveSZ2Qbwmq+PL4Nbfo1eHBPECLgB0dfvdPODN+4Fg1x1DE:MezF8MksQHq+ENbqeHSCcB0dntaq1fDE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a95cbece062ac935ebf0235bc31483bf40e60000edad94c7b5ddc616cd8a4a09
Files
-
a95cbece062ac935ebf0235bc31483bf40e60000edad94c7b5ddc616cd8a4a09.exe windows:4 windows x86 arch:x86
bce4a38e1f186b19f69121394340e840
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
user32
CharNextA
gdi32
SetMapMode
comdlg32
GetOpenFileNameA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
oledlg
ord8
ole32
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
SysAllocStringLen
winmm
mciGetErrorStringA
shlwapi
StrToIntA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 232KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 928KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ