Static task
static1
Behavioral task
behavioral1
Sample
a31085e8a37a6f7ce961ef4d3e86781779b5705b29acff05d0ab1f97fcd2e183.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a31085e8a37a6f7ce961ef4d3e86781779b5705b29acff05d0ab1f97fcd2e183.exe
Resource
win10v2004-20240802-en
General
-
Target
a31085e8a37a6f7ce961ef4d3e86781779b5705b29acff05d0ab1f97fcd2e183
-
Size
32KB
-
MD5
6e626461c441d2c3410447178d7d82e0
-
SHA1
586bbb913f018fc571062e9202407675c730eee9
-
SHA256
a31085e8a37a6f7ce961ef4d3e86781779b5705b29acff05d0ab1f97fcd2e183
-
SHA512
6583458d71fb4f9fda7f1a83bcd73d6628e92934b23ca93213166a1a3bb353068d374148c85ab6dbd30851498647aac8d666e63a59bedafb7de86b0e226e985d
-
SSDEEP
384:uhLCP1R8XnzvuwT0pZwBeH7lQDizU11u54TV0L4S0w9lL/:cCcvuwU6eHhQDi41U4TGL10wz/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a31085e8a37a6f7ce961ef4d3e86781779b5705b29acff05d0ab1f97fcd2e183
Files
-
a31085e8a37a6f7ce961ef4d3e86781779b5705b29acff05d0ab1f97fcd2e183.exe windows:5 windows x86 arch:x86
0472c674d7267dab79104d29a2a3058b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA
kernel32
TlsFree
TlsSetValue
TlsGetValue
CreateFileA
TlsAlloc
gdi32
LineTo
MoveToEx
comctl32
ord17
shell32
DragQueryPoint
DragFinish
DragQueryFileA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ