Static task
static1
Behavioral task
behavioral1
Sample
11f506caf2e42de1453ce0c0aae6106e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11f506caf2e42de1453ce0c0aae6106e.exe
Resource
win10v2004-20231215-en
General
-
Target
11f506caf2e42de1453ce0c0aae6106e
-
Size
65KB
-
MD5
11f506caf2e42de1453ce0c0aae6106e
-
SHA1
b479bce0b3528cc855fd137ce55d03750ad46414
-
SHA256
40a86dfc8dfb042758a9fba70c894ec100d9f25482da88e205679e9d28aa794d
-
SHA512
5beb71aee930f07a2f5cddac7f9857232604a21c84227504a37ac2ab236fcf99af14577029b3d3ef097ae8a62433be046e6d5e557c8cbae4a92f45cb67e1cdab
-
SSDEEP
1536:YDjZEcjVT5Z30GflOvfktJbBi144cUfTLsK:YptT5eUIv7e4cALs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11f506caf2e42de1453ce0c0aae6106e
Files
-
11f506caf2e42de1453ce0c0aae6106e.exe windows:4 windows x86 arch:x86
1ac200077c0d0d95f54641190decee8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TlsGetValue
LoadLibraryExW
ReleaseMutex
CreateFileA
lstrlenW
SetEnvironmentVariableA
VirtualQuery
SetLastError
HeapCreate
GetCurrentThreadId
DeleteAtom
GlobalUnlock
CloseHandle
GetPriorityClass
GlobalFree
FindResourceA
GetExitCodeProcess
CreateMutexA
GetStdHandle
user32
IsWindow
DispatchMessageA
SetFocus
CheckRadioButton
CreateWindowExA
CreateMenu
GetDC
GetIconInfo
DrawEdge
DrawMenuBar
CallWindowProcA
FillRect
GetDlgItem
ntshrui
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
IsPathSharedA
IsPathSharedW
GetLocalPathFromNetResourceA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gmwwlmb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE