Static task
static1
Behavioral task
behavioral1
Sample
092ad3eb4d583cc69a429b8b569c678d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
092ad3eb4d583cc69a429b8b569c678d.exe
Resource
win10v2004-20231215-en
General
-
Target
092ad3eb4d583cc69a429b8b569c678d
-
Size
290KB
-
MD5
092ad3eb4d583cc69a429b8b569c678d
-
SHA1
55b1e8a3d5c7241917d8e164918562d9e170212c
-
SHA256
e4003969a9440840b4a2128b316551e988d8c739fa0d267f889b5bdf19d70fba
-
SHA512
e4a3e715d306c05f1922bfcfd30bb078bafd147d643d9d05f646a26e53b3c87b948619f840134a9e7bc7dee439edf197d8cdc7b67a8cd15aaa7ecd34ad4dba34
-
SSDEEP
6144:OeUyzO6TvBO1EUcaIF5FA1OBTDJTOiLjjMwhLHHbtH9xvCBh:OdOBWEUcRFuKEqxrjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 092ad3eb4d583cc69a429b8b569c678d
Files
-
092ad3eb4d583cc69a429b8b569c678d.exe windows:1 windows x86 arch:x86
b762646afdacf5875c217cf6c397bcd4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoUninitialize
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
Sections
CODE Size: 277KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE