Static task
static1
Behavioral task
behavioral1
Sample
00a152b1860188a3e0316e26209a59e0N.exe
Resource
win7-20240704-en
General
-
Target
00a152b1860188a3e0316e26209a59e0N.exe
-
Size
95KB
-
MD5
00a152b1860188a3e0316e26209a59e0
-
SHA1
c5ea1be849e7039559268b683987956b4bea2c9b
-
SHA256
fceafcb203db492c7518f4ca4b9ed46ebfac1f657cb80757ab009c43ccb95a7d
-
SHA512
a5f161717540273ed25814a06d25480f555e78b9f128c67a2a14cafab0ecc2697f1eea54e89d92c22a2b8e7e5065ee68c2cb0e6baf70c7bd00b9be45cd163d83
-
SSDEEP
1536:q3qkhr4xNgPoHdoUrbqlub2n80fK1SBNMrjFnEAI1vn+jeYnsXEiAjmU:Sqo87gA9VFwNB2X9tnjeYnsXEiAN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00a152b1860188a3e0316e26209a59e0N.exe
Files
-
00a152b1860188a3e0316e26209a59e0N.exe.exe windows:1 windows x86 arch:x86
736388fe46c7704b1cd07e998591648f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegFlushKey
oleaut32
VariantClear
shell32
ShellExecuteA
user32
SetRect
wininet
InternetOpenA
wsock32
send
Sections
.MPRESS1 Size: 79KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE