Static task
static1
Behavioral task
behavioral1
Sample
09e05ec2fa77c042dd48b23bd87af5d1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09e05ec2fa77c042dd48b23bd87af5d1.exe
Resource
win10v2004-20231215-en
General
-
Target
09e05ec2fa77c042dd48b23bd87af5d1
-
Size
3.8MB
-
MD5
09e05ec2fa77c042dd48b23bd87af5d1
-
SHA1
2ec328691c32e8ac656996e807dffcb79be4bd1e
-
SHA256
0983711a6cc222d52cf7dd6092c6232126a12736f379f64d5b8cf4f4a475fd5e
-
SHA512
134f9b06ea9837f6480b2bda9bc4360d1fd12685fc5cb7f2dd0363f9d57ee29a06bb3c19573f20ad8fa0e3ef2384b76341a1490d87758349a2158b294f1937c6
-
SSDEEP
98304:UFaONQkFkUZV8LZZilJvvu0MxJL+6ffjbW3bvdPGVmF1nDWSEnl/:UFayFhAZOvqp+6ffPAZPImTKScl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09e05ec2fa77c042dd48b23bd87af5d1
Files
-
09e05ec2fa77c042dd48b23bd87af5d1.exe windows:4 windows x86 arch:x86
b6ffb9014d502d1650226318aef9871f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
wininet
InternetGetConnectedState
Sections
CODE Size: 3.7MB - Virtual size: 20.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE