Static task
static1
Behavioral task
behavioral1
Sample
a2ddef19a4a3764b331e45545997f3bae1dcc2dace54e1289d20e8617b2283a1.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a2ddef19a4a3764b331e45545997f3bae1dcc2dace54e1289d20e8617b2283a1.exe
Resource
win10v2004-20240802-en
General
-
Target
a2ddef19a4a3764b331e45545997f3bae1dcc2dace54e1289d20e8617b2283a1
-
Size
3.4MB
-
MD5
8828231cc02d9f1cee7fc341d881f462
-
SHA1
52d09eed842ccca65fa0adf9af9e33d423600e3b
-
SHA256
a2ddef19a4a3764b331e45545997f3bae1dcc2dace54e1289d20e8617b2283a1
-
SHA512
ab07581ba84f937756398582c3854fa6ed25040b5cae68ffe26b80a0ae77e1dfc3d91edf59e1316ade494194707aa3e14af8974397ed86afe794fc6b61dbda17
-
SSDEEP
98304:+/w+p3ZckYM/FdC0VrsQ5FOss3Me99DWYmnNjLe5TJpqN7:YXp3+kP/FIms0O13MOWfNja5VM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2ddef19a4a3764b331e45545997f3bae1dcc2dace54e1289d20e8617b2283a1
Files
-
a2ddef19a4a3764b331e45545997f3bae1dcc2dace54e1289d20e8617b2283a1.exe windows:4 windows x86 arch:x86
1e2f3493ff0a198b5c272c0c2e6afc09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetSystemTimeAsFileTime
GetModuleHandleW
UnhandledExceptionFilter
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
SetLastError
WriteFile
WaitForSingleObject
ExitProcess
GetModuleFileNameW
IsDebuggerPresent
GetCommandLineW
FindClose
ReadFile
SetEvent
GetACP
FormatMessageW
GetModuleHandleA
InitializeCriticalSection
CreateEventW
TlsAlloc
HeapSize
LoadLibraryExW
CreateThread
TlsFree
SetFilePointer
CompareStringW
GetStringTypeW
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
SetStdHandle
FindNextFileW
IsValidCodePage
FindFirstFileW
DeleteFileW
GetConsoleCP
GetCommandLineA
SetEndOfFile
ResetEvent
GetVersionExW
ReleaseMutex
OutputDebugStringW
GetFileSize
EncodePointer
lstrlenW
LoadLibraryA
GetModuleHandleExW
GetFullPathNameW
LoadResource
UnmapViewOfFile
GetExitCodeProcess
ExpandEnvironmentStringsW
CreateProcessW
user32
TranslateMessage
DispatchMessageW
DefWindowProcW
PostQuitMessage
GetWindowLongW
GetWindowRect
PostMessageW
GetClientRect
SetWindowPos
IsWindow
LoadIconW
SetFocus
SetForegroundWindow
BeginPaint
ScreenToClient
SetCursor
InvalidateRect
EnableMenuItem
GetWindow
UpdateWindow
GetKeyState
MessageBoxA
CharUpperW
ClientToScreen
Sections
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE