Static task
static1
Behavioral task
behavioral1
Sample
2a9a583772dc9a42d0805ae2f61aba960144ee97324ac7ce13f7e1a89f757d0c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a9a583772dc9a42d0805ae2f61aba960144ee97324ac7ce13f7e1a89f757d0c.exe
Resource
win10v2004-20240226-en
General
-
Target
2a9a583772dc9a42d0805ae2f61aba960144ee97324ac7ce13f7e1a89f757d0c
-
Size
349KB
-
MD5
905811cfd9a6a38cbb9ec5e176f8b841
-
SHA1
c78ec3be27689ad1b8bb70fac7f7aa606ddbb399
-
SHA256
2a9a583772dc9a42d0805ae2f61aba960144ee97324ac7ce13f7e1a89f757d0c
-
SHA512
3703ec5db394363e9f18fb30e646a139779e795dca4f3136b0b8394faf6efd875b77c04444cbade03102dd0f264837ae21815a660dbb7d1ee7e8b9598fa5d249
-
SSDEEP
6144:yohUBjIhv8UNvJLlvLqtPa6T5/jbpWX+8tW78RQp4b0CrnCLuQBn:yohXkA9lvOjbpWXnt1b0CrnuuQBn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a9a583772dc9a42d0805ae2f61aba960144ee97324ac7ce13f7e1a89f757d0c
Files
-
2a9a583772dc9a42d0805ae2f61aba960144ee97324ac7ce13f7e1a89f757d0c.exe windows:5 windows x86 arch:x86
ed264955f20d83c8f7c9958892120459
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
DefWindowProcW
advapi32
RegCloseKey
Sections
Size: - Virtual size: 160KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE