Static task
static1
Behavioral task
behavioral1
Sample
a9b02b5cb10ebbb72115b291e9331eb2e38321294b315f8f865c75dc1e018314.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a9b02b5cb10ebbb72115b291e9331eb2e38321294b315f8f865c75dc1e018314.exe
Resource
win10v2004-20240910-en
General
-
Target
a9b02b5cb10ebbb72115b291e9331eb2e38321294b315f8f865c75dc1e018314
-
Size
4.2MB
-
MD5
1521ae71b02b9b2280ddb507c1e0f1c8
-
SHA1
4cfa9424a17147f7b538f1a83136bd6ec474691f
-
SHA256
a9b02b5cb10ebbb72115b291e9331eb2e38321294b315f8f865c75dc1e018314
-
SHA512
f9d1b9563ca2da9663e868debc5d6acd73fb3299febb873ca13bf2bd8f66277de1d96106d75b6881955b19a16b70eda0fd141a75572b6ba9914d8db83e3a95f2
-
SSDEEP
98304:+Nim05CplinsgYPlnFuN21oIRLKhVmv4BBhf179jbLsT4yc4xO:605E7gYPlFDUh0v4tVpLCc2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9b02b5cb10ebbb72115b291e9331eb2e38321294b315f8f865c75dc1e018314
Files
-
a9b02b5cb10ebbb72115b291e9331eb2e38321294b315f8f865c75dc1e018314.exe windows:4 windows x86 arch:x86
c8055710bfd17954481d49f4c9f1cb66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
user32
wsprintfA
gdi32
SelectClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.3MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sp Size: 944KB - Virtual size: 944KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ