Static task
static1
Behavioral task
behavioral1
Sample
MS11-080_x86.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
MS11-080_x86.exe
Resource
win10v2004-20230703-en
General
-
Target
MS11-080_x86.exe
-
Size
168KB
-
MD5
d328bafd176ce9044ed1529a89494475
-
SHA1
a65068fdbba9df9da44414870e4ac0bb6520b755
-
SHA256
bf09f4250cd661e8d7bb3e8bcb2be63630e89f8874d4a8d627e21c0f0eb0467e
-
SHA512
fef3093a3219e3adc59d448b627d54cb183a48d159210191b2b7c0c01bbbae9c4d1bc0a424570e237b177681859dd5378735ef222b113fe1b01a856682473353
-
SSDEEP
1536:y+hnCBGMxRjHryRyhv02kZo7Tml0nwTcNVu6M6ooRy:RkwMX+RyhvmZo/mWnwTGvTo/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MS11-080_x86.exe
Files
-
MS11-080_x86.exe.exe windows x86
46a0af4a25e12b510b70ef7d3aba93b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
VirtualAlloc
LoadLibraryA
GetProcAddress
GetModuleHandleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetLastError
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
CloseHandle
netapi32
NetUserAdd
NetLocalGroupAddMembers
ws2_32
connect
htons
WSAStartup
socket
inet_addr
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ