Static task
static1
Behavioral task
behavioral1
Sample
0811e906bab3bf74395b8e6a8b72cd73.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0811e906bab3bf74395b8e6a8b72cd73.exe
Resource
win10v2004-20231215-en
General
-
Target
0811e906bab3bf74395b8e6a8b72cd73
-
Size
58KB
-
MD5
0811e906bab3bf74395b8e6a8b72cd73
-
SHA1
dc5e3355714fb68283cdc2a1423da3df4a052ef3
-
SHA256
72f6f6c99377663276160d4a441834e1f12f8c025ea91ecf7df03e7a44d9ac7f
-
SHA512
928e54bfbcba655135ee27a9c93564d325af6ee4e8b3769d0a19befbc7bd45988eec1fc8e3919888c82250d80ee6312cd217832123a2bc8003c33694c38bbd31
-
SSDEEP
768:0I0YfyK+3hl9sjHHHYhuD+piPiN7nyfKECuJLYpLZF+oyKHfIJ+FtlpOa601:hyNhHG6jpJ7mKEC+Ypj+oyiQylpOaV1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0811e906bab3bf74395b8e6a8b72cd73
Files
-
0811e906bab3bf74395b8e6a8b72cd73.exe windows:4 windows x86 arch:x86
f62c5334447b45926e094aafa3ed0821
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
LoadLibraryExW
CreateMutexA
GetPriorityClass
GetCurrentThreadId
CreateFileA
GlobalFree
CloseHandle
GetStdHandle
GetModuleHandleA
ReleaseMutex
TlsGetValue
SetEnvironmentVariableA
GlobalUnlock
lstrlenW
SetLastError
GetExitCodeProcess
DeleteAtom
VirtualQuery
HeapCreate
user32
DispatchMessageA
GetDlgItem
GetDC
GetIconInfo
CheckRadioButton
DrawEdge
SetFocus
DrawMenuBar
IsWindow
CreateWindowExA
CreateMenu
FillRect
CallWindowProcA
ntshrui
SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
IsPathSharedA
GetLocalPathFromNetResourceA
IsPathSharedW
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xitrneg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE