Static task
static1
Behavioral task
behavioral1
Sample
1a1038b1a982f04294517ed4b58b93bd8075bdb4eccf38c0a6b4f8121147d5e3.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a1038b1a982f04294517ed4b58b93bd8075bdb4eccf38c0a6b4f8121147d5e3.exe
Resource
win10v2004-20240508-en
General
-
Target
1a1038b1a982f04294517ed4b58b93bd8075bdb4eccf38c0a6b4f8121147d5e3.exe
-
Size
49KB
-
MD5
fc02c5b58b2fd8419d46f0528abc8080
-
SHA1
30b3c0c44de292741ddd97039f0e32581a87a929
-
SHA256
1a1038b1a982f04294517ed4b58b93bd8075bdb4eccf38c0a6b4f8121147d5e3
-
SHA512
d00927fbb8f0feb1acd704140991682338acc8f9824e910a0d5724e96b8908358370bf02f83b9fe7d796c421b51b0456b3740afa9e4a569d08ddd25c8e0dc56e
-
SSDEEP
768:av4MEc04ZzLh3VtAghWjg8qstaNC7WlH8VTrf7AshVN/OED:awMEcVLh3QghuGCqV8V3zhbD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a1038b1a982f04294517ed4b58b93bd8075bdb4eccf38c0a6b4f8121147d5e3.exe
Files
-
1a1038b1a982f04294517ed4b58b93bd8075bdb4eccf38c0a6b4f8121147d5e3.exe.exe windows:4 windows x86 arch:x86
bd227ba966c127e93fe82f25f211eaca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
user32
wsprintfA
MessageBoxA
Sections
.data Size: 19KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ