Static task
static1
Behavioral task
behavioral1
Sample
089c5f615350e60a84e2e39f3876ce2d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
089c5f615350e60a84e2e39f3876ce2d.exe
Resource
win10v2004-20231215-en
General
-
Target
089c5f615350e60a84e2e39f3876ce2d
-
Size
76KB
-
MD5
089c5f615350e60a84e2e39f3876ce2d
-
SHA1
b7d78397afabbe1e3e96a6d98ccfdfa15f82151c
-
SHA256
3e5be4b07cf150780fef6b46103349e2aeb710a33feb4131af51f870dc5917fe
-
SHA512
99f93ed24546ab4ee8dbab8bf223fa96cdf46ae9c63159d7fec6efcf636029f8861013996be66c272e7233e7138e26263af455d2775bc28746a6a5e591bf9476
-
SSDEEP
1536:tqm/TF733pqPJmRifgxs13wpLpjVrs2ryrd1vUQuq6:tqqjqhmR123QHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089c5f615350e60a84e2e39f3876ce2d
Files
-
089c5f615350e60a84e2e39f3876ce2d.exe windows:4 windows x86 arch:x86
3f6c7ac18a43a7eeeb06b3e04dc2ae89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathA
Module32First
GetCPInfo
WriteConsoleInputA
PeekConsoleInputW
GetFileAttributesW
WaitForSingleObjectEx
UnhandledExceptionFilter
DeactivateActCtx
GetLogicalDriveStringsA
GetNamedPipeHandleStateA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE