Static task
static1
Behavioral task
behavioral1
Sample
a562e681906cbb239de7c405a9a32a850e4c0fa1fde875ba2eb2b71babba9f23.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a562e681906cbb239de7c405a9a32a850e4c0fa1fde875ba2eb2b71babba9f23.exe
Resource
win10v2004-20240508-en
General
-
Target
a562e681906cbb239de7c405a9a32a850e4c0fa1fde875ba2eb2b71babba9f23
-
Size
829KB
-
MD5
0b0d76744384d534ebfb2f8d13a682a8
-
SHA1
0461b92274ba9bc94c2da70221de42a49f341c59
-
SHA256
a562e681906cbb239de7c405a9a32a850e4c0fa1fde875ba2eb2b71babba9f23
-
SHA512
5d0c1fbf16571391615b3d42874c85e0a44342af17f75a6bf748fe1d9ec470d894f7a55d0f4bc3f3f18d184686300718f9bf8fc302f1431531308ac2b7ae44a7
-
SSDEEP
24576:M3HugtHvQzVOvrDkuMX4RmUJUlpk0cK1+l0XBk0OI9NE:qHugtHoWDkuE4RmUJa5cpOXi0VNE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a562e681906cbb239de7c405a9a32a850e4c0fa1fde875ba2eb2b71babba9f23
Files
-
a562e681906cbb239de7c405a9a32a850e4c0fa1fde875ba2eb2b71babba9f23.exe windows:4 windows x86 arch:x86
83b9f9b5f4895b6308f8c02c32e460e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
LoadBitmapA
advapi32
RegCreateKeyA
Sections
Size: - Virtual size: 644KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE