Static task
static1
Behavioral task
behavioral1
Sample
0b10d932d0f40ca9285687f5a6a6018e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b10d932d0f40ca9285687f5a6a6018e.exe
Resource
win10v2004-20231215-en
General
-
Target
0b10d932d0f40ca9285687f5a6a6018e
-
Size
45KB
-
MD5
0b10d932d0f40ca9285687f5a6a6018e
-
SHA1
2a5d63589dc393b33bb77221c67230b820edc8b5
-
SHA256
e33d52c3a0cef76727685aab6d20e6f6cb9df0b4d22ca6508b7528b959db9375
-
SHA512
4808ecc0183ceed1e8cd29d73b18705f6242b4a3513991f91bf2e6966593719a6c244ec5fe9dae81af14a867a7cdd09b7cf637944d866f49abe4147389469a38
-
SSDEEP
768:9MMezwC20+SR3tyR2/qBHNRF/LfWHnODDAW:sH20+SR3Q0E1fWHvW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b10d932d0f40ca9285687f5a6a6018e
Files
-
0b10d932d0f40ca9285687f5a6a6018e.exe windows:4 windows x86 arch:x86
5ade5cea3e48aee2beec8e945a734461
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetProcessWindowStation
GetWindowThreadProcessId
GetWindowDC
TranslateMessageEx
GetDC
RegisterClipboardFormatA
CharUpperW
RegisterWindowMessageA
PostMessageW
GetUserObjectInformationW
UnregisterClassA
UnregisterClassW
GetSysColor
GetWindowLongW
SetTimer
GetSysColorBrush
TranslateMessage
RegisterWindowMessageA
GetSystemMetrics
PostMessageW
RegisterWindowMessageA
GetWindowThreadProcessId
kernel32
GetStartupInfoW
LoadLibraryA
CreateProcessW
TerminateProcess
GetSystemTimeAsFileTime
VirtualProtect
VirtualProtectEx
GetStartupInfoW
GetSystemTimeAsFileTime
LoadLibraryExW
LoadLibraryExW
Sleep
TerminateProcess
TerminateProcess
VirtualProtect
GetStartupInfoA
LoadLibraryA
CreateProcessA
SleepEx
CreateFileA
CreateProcessW
GetSystemTime
ReadFile
LoadLibraryExW
VirtualProtectEx
ReleaseMutex
GetStartupInfoW
WaitForSingleObject
ReadFile
WaitForSingleObject
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetBinaryTypeW
ReadFile
VirtualProtect
GetStartupInfoA
VirtualProtect
ReleaseMutex
ReleaseMutex
CreateProcessA
CreateProcessW
GetSystemTimeAsFileTime
GetStartupInfoA
CreateProcessA
ReadFile
ReadFile
GetStartupInfoW
GetSystemTime
CreateFileA
CreateProcessW
LoadLibraryA
ReadProcessMemory
CreateProcessA
CreateProcessA
ReleaseMutex
VirtualProtectEx
GetStartupInfoA
ReadFile
GetSystemTimeAsFileTime
LoadLibraryA
ReleaseMutex
LoadLibraryA
LoadLibraryExA
Sections
.text Size: 12KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ