Static task
static1
Behavioral task
behavioral1
Sample
0d60d6d7b8d5c77e2d59797adc7287d3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d60d6d7b8d5c77e2d59797adc7287d3.exe
Resource
win10v2004-20231215-en
General
-
Target
0d60d6d7b8d5c77e2d59797adc7287d3
-
Size
238KB
-
MD5
0d60d6d7b8d5c77e2d59797adc7287d3
-
SHA1
cf523856f6ac0ed1af19921b012f306339ac4cd1
-
SHA256
84534517bc83235491ab8794016deabb92533d29e036c44a67ab47d1bca2b4de
-
SHA512
0f9e651a0c87d812177020a21d6a8ae3dd301c0f0a751a4e9e0ab07c6b3f285809ca418fbed2bb2183aff14494bfece27175aa5202599470afdf000b5c3e8ac0
-
SSDEEP
6144:zYza2+gz0C5rZYXqT8v68vyoy+/B+mr6pjE6DnTlIpLQW8:kzlT5aRx/EmrIEolI98
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d60d6d7b8d5c77e2d59797adc7287d3
Files
-
0d60d6d7b8d5c77e2d59797adc7287d3.exe windows:4 windows x86 arch:x86
d68ccce0f27ef45490fca0bdb17cb8a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
UnrealizeObject
wsock32
WSACleanup
shfolder
SHGetFolderPathA
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
Sections
CODE Size: 111KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ultra Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ