Static task
static1
Behavioral task
behavioral1
Sample
090f12468d8af5c2db55887d06c4de0f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
090f12468d8af5c2db55887d06c4de0f.exe
Resource
win10v2004-20231222-en
General
-
Target
090f12468d8af5c2db55887d06c4de0f
-
Size
8.7MB
-
MD5
090f12468d8af5c2db55887d06c4de0f
-
SHA1
a5addf33ed0035dfacc91acf012b6aae36945cb9
-
SHA256
a2bf1c8f4354c69f0869fedfc2df94fba87a862716dbc56508d5dd2db29d6061
-
SHA512
10cf6dbfd35c8e6584dfa0f4081f683995e6333a113145889ee5c13ca7188d8c6bf930400a117f1cb6cc86c318e42178662a6536c5e6003df0d5ef61560dc0dc
-
SSDEEP
98304:qbAd3334sahqNbOY/URLJYEjuq6JEJO4IRIGY4cqBySggvhiWaOuBuru1v9ZlVA2:3d3334sazY/wLtj56CMxKGY4cqhaZI7a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 090f12468d8af5c2db55887d06c4de0f
Files
-
090f12468d8af5c2db55887d06c4de0f.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE