Static task
static1
Behavioral task
behavioral1
Sample
a3d46fd045c578d27e6f39196416d2b0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a3d46fd045c578d27e6f39196416d2b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
a3d46fd045c578d27e6f39196416d2b0N.exe
-
Size
41KB
-
MD5
a3d46fd045c578d27e6f39196416d2b0
-
SHA1
1762a0356957b1cc77b5606e711bac07ff76d548
-
SHA256
df84186e3d53ba5d1161093b81b6682581ff8f424c4621e15088c2308ae813fd
-
SHA512
7609ad0a5eea5cbca64e40ea289d53704030988a0b607dc529a3c1ea764b2000169f6b24fc214e91ff85fbe0e2347fc145626cf2399175f9c72431193332b8cd
-
SSDEEP
768:rqQoj/dSzNVQ1mDNJWbKEdBMQXQ3Cn4eQQyrcwxWXlhTiYavvGX2vvNM:mQoj/YNJcAQykhTVXl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3d46fd045c578d27e6f39196416d2b0N.exe
Files
-
a3d46fd045c578d27e6f39196416d2b0N.exe.exe windows:4 windows x86 arch:x86
0c93a546ce014b95ee53a00e9f2ffe55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetLastError
Sleep
GetLocaleInfoA
GetStartupInfoA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE