Static task
static1
Behavioral task
behavioral1
Sample
0961a8a6039092b056b1e9fb32a34b11.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0961a8a6039092b056b1e9fb32a34b11.exe
Resource
win10v2004-20231215-en
General
-
Target
0961a8a6039092b056b1e9fb32a34b11
-
Size
89KB
-
MD5
0961a8a6039092b056b1e9fb32a34b11
-
SHA1
233addab8631717e63e561ec3c71ac5e0339f185
-
SHA256
6f09a7fb0861510b5c68ffa9a79d7e11f8c7aed5f107e02d336d713c0484fb45
-
SHA512
09ddb5acfef5241669c010956c4c7caab373c96582810087e0e5c219f0f77beaa77b28322fe6f6dd108967ddede50b993acd1e6fbb3ed3539dc83e8c4e8452fe
-
SSDEEP
768:cyVLn278f+Rd4BDMVAaAF8tXID8wx8z+xSSJqM+fHfB68c8giIUq0YM7X:TDNhFSYfsUnof/s8X3q0d7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0961a8a6039092b056b1e9fb32a34b11
Files
-
0961a8a6039092b056b1e9fb32a34b11.exe windows:4 windows x86 arch:x86
0cdb0de50cba9afaabde63ca775f8abf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
DeleteCriticalSection
CreateThread
ExitProcess
SetEvent
HeapDestroy
GetLastError
GetDiskFreeSpaceA
GetModuleHandleA
TlsGetValue
VirtualProtect
GetConsoleFontSize
ReleaseMutex
SearchPathA
CloseHandle
GetTickCount
lstrlenA
Sleep
AddAtomA
FindResourceExA
user32
CreateMenu
GetKeyState
DialogBoxParamA
CreateWindowExA
CloseWindow
DragDetect
CopyIcon
DispatchMessageA
GetMessageA
GetScrollBarInfo
CopyImage
EndDialog
EnableWindow
IsIconic
wshbth
WSHNotify
WSHOpenSocket2
WSHJoinLeaf
WSHIoctl
NSPStartup
shell32
FreeIconList
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cltierj Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE