Static task
static1
Behavioral task
behavioral1
Sample
011e0b0ed7ccb1e20eefcd4dec310557.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
011e0b0ed7ccb1e20eefcd4dec310557.exe
Resource
win10v2004-20231215-en
General
-
Target
011e0b0ed7ccb1e20eefcd4dec310557
-
Size
10KB
-
MD5
011e0b0ed7ccb1e20eefcd4dec310557
-
SHA1
12f544ccf16771971035b88ee97e7cd7d6f60743
-
SHA256
9ff065d2f61ad39b7b4367c9ae568ce7f16ac59dc347cf0e610b95c502dcfcde
-
SHA512
7a716cd1dcc6908f4c333b64e1e75cac1b914eebe5b6b26ab487f27f3de8b9ad2bbac123f935f9504df58d10c29ce3d193b453dd55fa3b917f803783f5907b2a
-
SSDEEP
192:/I8YRDA+yUE+V2eB6GjdsGnpduKRW8kvCwTV06kvU3v+Cj:/m0rEv6udhpduKRkvCwTV0dexj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 011e0b0ed7ccb1e20eefcd4dec310557
Files
-
011e0b0ed7ccb1e20eefcd4dec310557.exe windows:4 windows x86 arch:x86
a49b528798018f5e3566075235f9b24f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
imagehlp
MakeSureDirectoryPathExists
msvcrt
exit
wininet
InternetOpenA
Sections
.text Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 627B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yy3sh3ll Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yy3sh3ll Size: 73B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE