Static task
static1
Behavioral task
behavioral1
Sample
0997b6b84114014b97e79694eb8b32bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0997b6b84114014b97e79694eb8b32bc.exe
Resource
win10v2004-20231215-en
General
-
Target
0997b6b84114014b97e79694eb8b32bc
-
Size
243KB
-
MD5
0997b6b84114014b97e79694eb8b32bc
-
SHA1
61d4be0dd9496f2789f5ded268914d538fb5fa05
-
SHA256
1a836981a6d5ceca244e6424d3541841cedb9ea16ef8de9729f64410bcd70037
-
SHA512
d25684fa929e6395f5009f5529a3fd71d28c32343579f05ff3b22b1d73ab72357332adc7684ab21544ea0c6f234b958aa4847686df31a17ff680c0ed9457a483
-
SSDEEP
6144:HCfTXkxqDLPvuuYe0SlhF8yCrq3u0o3UpU8SSO5O3jxT0HikrcrKrorhrlirYSYC:HCFPvuuYklhF8yCrq3u0o3UpU8SSO5OU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0997b6b84114014b97e79694eb8b32bc
Files
-
0997b6b84114014b97e79694eb8b32bc.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE