Static task
static1
Behavioral task
behavioral1
Sample
11e3efe81e66f586a8be6b22c3e7348b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11e3efe81e66f586a8be6b22c3e7348b.exe
Resource
win10v2004-20231215-en
General
-
Target
11e3efe81e66f586a8be6b22c3e7348b
-
Size
129KB
-
MD5
11e3efe81e66f586a8be6b22c3e7348b
-
SHA1
57df5d660d0df802a6dc70d7233179115a8d4448
-
SHA256
75f12673691c301d87ae0e2bc986ed7ed2607947737c503d64d3209dbc5b4db6
-
SHA512
5d11e20ccdbda37401f4c42663e86f1a71c065d6130285aa81a0005d7b22d33d40cf2d392e58240678085d3d81b54fb43aed7276d3330f54b15416868d778fb1
-
SSDEEP
3072:fkVgb75MVRDeLulKof+U5sTpKwd3wqo4OpRN:cmIDeK46+U2Qczkz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e3efe81e66f586a8be6b22c3e7348b
Files
-
11e3efe81e66f586a8be6b22c3e7348b.exe windows:4 windows x86 arch:x86
92cb819a17fc773833461e8d004f147e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
ole32
GetHGlobalFromStream
msvbvm60
ord690
Sections
pec1 Size: 120KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE