Static task
static1
Behavioral task
behavioral1
Sample
09d33dbd5ab6ae807fcd688e37556c58.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09d33dbd5ab6ae807fcd688e37556c58.exe
Resource
win10v2004-20231222-en
General
-
Target
09d33dbd5ab6ae807fcd688e37556c58
-
Size
320KB
-
MD5
09d33dbd5ab6ae807fcd688e37556c58
-
SHA1
e439acec35299d99914dc895f9f3ddca73fdac76
-
SHA256
41756f6245938817ad7b6f25a36e9a7353af20171a39860442fe8c5a4222f50e
-
SHA512
a78bb10698f1ab1abb690afdecf4338c499becc5db246ba0051a6325ff806f736e850452da9931c8cdb82867a17fa03f709cd0161cdf7dea2128dd53c2bb1d00
-
SSDEEP
6144:AfuPiR71DaL7IlQ1AnjBfWaf3XEMs4uMAY5KIJe8LsCvZkpHPgpY7so7tGiq1usT:Ku6zaCeAnMaf309tHjCv2dYpY7sbiqtT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d33dbd5ab6ae807fcd688e37556c58
Files
-
09d33dbd5ab6ae807fcd688e37556c58.exe windows:4 windows x86 arch:x86
0c540b271f11b9c787e07d55077c62bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapDestroy
DeleteCriticalSection
GetConsoleWindow
GetStartupInfoA
CreateHardLinkA
ReleaseMutex
GetModuleHandleA
ExitProcess
SetEvent
IsValidCodePage
lstrcmpiA
GetPrivateProfileStringA
GetTempPathA
GetTickCount
HeapSize
DeleteTimerQueue
ResumeThread
VirtualProtect
GetLastError
GetDriveTypeA
advapi32
RegCreateKeyExA
LsaSetSecret
LsaFreeMemory
ReportEventA
RegEnumValueA
RegQueryInfoKeyA
RegQueryValueExA
GetFileSecurityA
RegCloseKey
CloseEventLog
LsaClose
RegLoadKeyA
OpenEventLogA
AccessCheck
IsValidAcl
CloseTrace
RegEnumKeyExA
FreeSid
GetSecurityInfo
IsValidSid
wininet
HttpQueryInfoA
DeleteUrlCacheEntryA
DetectAutoProxyUrl
HttpSendRequestA
FindCloseUrlCache
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ