Static task
static1
Behavioral task
behavioral1
Sample
2a026f83dfe76f27d7cad4c42049613909fe4777e801c59729aee53c5ad18babN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a026f83dfe76f27d7cad4c42049613909fe4777e801c59729aee53c5ad18babN.exe
Resource
win10v2004-20240802-en
General
-
Target
2a026f83dfe76f27d7cad4c42049613909fe4777e801c59729aee53c5ad18babN
-
Size
19KB
-
MD5
9ae788d6af73b13d15c31c1d596097c0
-
SHA1
2703c29a2af10329eb82a6996c9f5eed4028815f
-
SHA256
2a026f83dfe76f27d7cad4c42049613909fe4777e801c59729aee53c5ad18bab
-
SHA512
e5c97869fd75ac2a14077ea06f69d208debf2ca18f5162e4538c2735cdf3fb328701b9202e1b1a17803dc7b082f1574b6080b6a648bb3fc81601b39647c53920
-
SSDEEP
384:mQZqSstnLmJ1d6dzkT8OwNrSfB73TtWMiS2R3Xbr17vvxlL:jqSsE1EdgT8rgDtWfSW3Lx7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a026f83dfe76f27d7cad4c42049613909fe4777e801c59729aee53c5ad18babN
Files
-
2a026f83dfe76f27d7cad4c42049613909fe4777e801c59729aee53c5ad18babN.exe windows:5 windows x86 arch:x86
7bef13f58538df84f5270fe7542e9811
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
SetTimer
shell32
ShellExecuteExW
ole32
CoInitializeEx
psapi
GetModuleBaseNameW
shlwapi
StrStrNIW
ntdll
memset
advapi32
RegFlushKey
Sections
.MPRESS1 Size: 15KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE