Static task
static1
Behavioral task
behavioral1
Sample
09ec276b9abfb0a90cea10347b6e8cc1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09ec276b9abfb0a90cea10347b6e8cc1.exe
Resource
win10v2004-20231215-en
General
-
Target
09ec276b9abfb0a90cea10347b6e8cc1
-
Size
413KB
-
MD5
09ec276b9abfb0a90cea10347b6e8cc1
-
SHA1
2b341df165dc18f3775f59a0d20da18613e40fd9
-
SHA256
3a092a9b8db31ab68798137f020a043bc4b26181f9156f04fb4677a2b13acd51
-
SHA512
332e90768b63185525a5a33cc4d25952041f65bb234ea6088e71e6bc0277ba63e913206745a61f8098c4f50770c0ed99c082524016c7343037c4fbc07972754f
-
SSDEEP
6144:t+DbBikiaHIOujx5HFMvdAKwrm8A420WyLrvUSWcC2mtr/p1jTB8u0v8:tabEkia2N5HGEA50WyLBWzBjTe9v8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09ec276b9abfb0a90cea10347b6e8cc1
Files
-
09ec276b9abfb0a90cea10347b6e8cc1.exe windows:4 windows x86 arch:x86
12ef9afc7baa551b55fdaf93a69c5796
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
mpr
WNetGetUserA
version
VerQueryValueA
gdi32
SaveDC
comctl32
ImageList_Add
shell32
ShellExecuteA
wininet
InternetOpenA
winmm
waveInOpen
netapi32
Netbios
wsock32
send
msvfw32
DrawDibDraw
avicap32
capCreateCaptureWindowA
urlmon
URLDownloadToFileA
ws2_32
WSACleanup
Sections
.text Size: 405KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linghun Size: 62B - Virtual size: 62B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE