Static task
static1
Behavioral task
behavioral1
Sample
2aff9f4b9a64168ce2b5a031f81ce35c759635091d15d54a03a3318babc6ec7b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2aff9f4b9a64168ce2b5a031f81ce35c759635091d15d54a03a3318babc6ec7b.exe
Resource
win10v2004-20240508-en
General
-
Target
2aff9f4b9a64168ce2b5a031f81ce35c759635091d15d54a03a3318babc6ec7b
-
Size
398KB
-
MD5
b092f52111eafdb88d8cc5a8a824323c
-
SHA1
f99d0640653cf3a64deb8641c5aa46828c9cd031
-
SHA256
2aff9f4b9a64168ce2b5a031f81ce35c759635091d15d54a03a3318babc6ec7b
-
SHA512
b9e5d5cff8910773ce8a880858935bc1b8c635a8a00cc5c6804d527eead04505804c9fae62200abb997b99f744c0181479e973b6466d728a4abf1dea390f0906
-
SSDEEP
12288:9bPHdKYAO63nKT58kJl9Pzqf5u1G1IA6/PTN:979I3ng+00v1wrN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2aff9f4b9a64168ce2b5a031f81ce35c759635091d15d54a03a3318babc6ec7b
Files
-
2aff9f4b9a64168ce2b5a031f81ce35c759635091d15d54a03a3318babc6ec7b.exe windows:6 windows x86 arch:x86
4de596e02dfd8f7034d5d76abb88cf98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
wsprintfW
advapi32
RegCloseKey
comctl32
PropertySheet
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE