Static task
static1
Behavioral task
behavioral1
Sample
0111ae383637976057ad57fa2916658f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0111ae383637976057ad57fa2916658f.exe
Resource
win10v2004-20231215-en
General
-
Target
0111ae383637976057ad57fa2916658f
-
Size
873KB
-
MD5
0111ae383637976057ad57fa2916658f
-
SHA1
732b3f48bb0cc30174a13a4ba48d2cc324c4a14c
-
SHA256
06f54591ce5a6704356532395ed41417e3fb85a567ba1ab397c2ffce42a53fd4
-
SHA512
272100a6712d5305307e18e7a6f035d57f5258eb988e8ce030abfac73e1485041eefa0c093ca5918d744d2990c2d6663faaa1cf4b923927c46b5d7608a6a9ff4
-
SSDEEP
24576:7IKKcjon5x8kGKy7d+XGCVTADw48FSa42KjuYR:Cpn5WkGV7d2VEDES5Vum
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0111ae383637976057ad57fa2916658f
Files
-
0111ae383637976057ad57fa2916658f.exe windows:5 windows x86 arch:x86
b49baaf1338fde00bab3881dea207986
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Sections
Size: 143KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gmwoldfm Size: 609KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lcdeiswp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE