Static task
static1
Behavioral task
behavioral1
Sample
09d60bf89374083d723af6c7f11c4de0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09d60bf89374083d723af6c7f11c4de0.exe
Resource
win10v2004-20231222-en
General
-
Target
09d60bf89374083d723af6c7f11c4de0
-
Size
209KB
-
MD5
09d60bf89374083d723af6c7f11c4de0
-
SHA1
b760db9274b36a56658a4b60b50efb61dfdb6557
-
SHA256
d60eb67ecff5adb3db8c323ed42f61da939444b2a759b2fe7f3ae8b0a16f2f31
-
SHA512
a4796b7de3f6e5cbf9a2facb7c47ca87469139cffd7a8f340bf19ba9051d5ea6223d1c0547e93b113cb58e8d3000cb0793df2319525ff36a1f75d5b498555894
-
SSDEEP
3072:wldT+h49N2+6V2HXQWpj9kwQ7vi1U4hvIBsEudFiSDqWv7v+agneAGoCgKMEX9z8:wldThnH7pbIEUtB7uPpRr+o1N9F0Wy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d60bf89374083d723af6c7f11c4de0
Files
-
09d60bf89374083d723af6c7f11c4de0.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 204KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE