Static task
static1
Behavioral task
behavioral1
Sample
11b7fe3e8b361cbcf96dd0bf540cb92a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11b7fe3e8b361cbcf96dd0bf540cb92a.exe
Resource
win10v2004-20231222-en
General
-
Target
11b7fe3e8b361cbcf96dd0bf540cb92a
-
Size
372KB
-
MD5
11b7fe3e8b361cbcf96dd0bf540cb92a
-
SHA1
beb166b0cf33cbfd8afd82e5d84dd4f60873a2dd
-
SHA256
d0045e8c854557f79a055be7ca43d5b8f2c4043d9ef05926e67a81aa88cfff0f
-
SHA512
b6691ea5f6bbd79e2192484ec9fca8883593914d449737e86ec82b01bde5f42137482515d4a1b88a665d643cf65387107292d16e9860831b6b4f83badc512ad3
-
SSDEEP
6144:6oRBN7rCXDteZ1gGzEXIBGKjxqbfygVpGDjwj4vZKxW7qmpEXuIIc/SpzWJgpJDo:6ovN7rCX5s1gJ4Y1Dj4vZ4PpEcap6Un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11b7fe3e8b361cbcf96dd0bf540cb92a
Files
-
11b7fe3e8b361cbcf96dd0bf540cb92a.exe windows:4 windows x86 arch:x86
9339dc02287ba337c266d6b1cfbc09f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetDesktopWindow
GetWindowLongW
IsDialogMessageA
SetWindowTextA
SetWindowPos
GetSysColor
ScrollWindow
GetSysColorBrush
IsDialogMessageW
EndPaint
ScreenToClient
SetWindowPlacement
GetMessagePos
CallWindowProcA
LoadBitmapA
GetCursorPos
IsWindowUnicode
GetMenuItemCount
DefFrameProcA
LoadCursorA
IsWindow
GetParent
CreateWindowExA
CharNextW
CharToOemA
GetScrollPos
GetKeyboardLayout
EnumWindows
ShowScrollBar
GetDlgItem
DrawTextA
SystemParametersInfoA
SetTimer
GetDC
LoadKeyboardLayoutA
GetClassNameA
OpenClipboard
GetWindow
RegisterWindowMessageA
RedrawWindow
SetWindowsHookExA
CharNextA
DrawEdge
GetClassInfoA
ShowOwnedPopups
GetActiveWindow
SetScrollRange
DrawIcon
GetWindowDC
GetKeyboardType
LoadStringA
LoadIconA
GetLastActivePopup
SetCapture
AdjustWindowRectEx
GetClientRect
SetScrollInfo
GetCursor
TranslateMDISysAccel
TranslateMessage
MoveWindow
SetForegroundWindow
SetWindowLongA
InsertMenuItemA
ShowWindow
GetKeyboardLayoutList
MessageBeep
GetDCEx
EnumThreadWindows
FindWindowA
SetMenu
OemToCharA
InvalidateRect
EnumChildWindows
EnableMenuItem
GetWindowTextA
IntersectRect
SetActiveWindow
GetWindowPlacement
UnhookWindowsHookEx
DestroyWindow
CloseClipboard
CreateIcon
version
VerFindFileA
VerInstallFileA
GetFileVersionInfoSizeA
kernel32
ExitThread
IsBadReadPtr
GetCommandLineA
GetVersionExA
GetLastError
LoadLibraryExA
GetOEMCP
GetProcAddress
VirtualAlloc
GlobalAlloc
LoadLibraryA
GetCommandLineW
VirtualAllocEx
GetModuleHandleA
comctl32
ImageList_Remove
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES0 Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES3 Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 1024B - Virtual size: 646B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ