Static task
static1
Behavioral task
behavioral1
Sample
0b95679a64aa33e5859558f0ba3d96c2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b95679a64aa33e5859558f0ba3d96c2.exe
Resource
win10v2004-20231215-en
General
-
Target
0b95679a64aa33e5859558f0ba3d96c2
-
Size
75KB
-
MD5
0b95679a64aa33e5859558f0ba3d96c2
-
SHA1
84820e681c94e4da5e8a2feb1492b241df9a3b7b
-
SHA256
1dd5ed45836c3260ba5e71babdf6dba13c9f37aa1ac7f9874189039dd3333680
-
SHA512
99783c274c9394013bffdc9389e5424ae99a896e0d4582afb820519b6a066a9f3b76522269f56e5439d6c2475cc6f464b8abe41bce50121a3a76b7aeafa7270d
-
SSDEEP
1536:7EJn/TS6ZD5C2eWPw2U5xJ6GJJxmt8yrZcuvwnvq4nQ1kL1S+R:aTSmDxnP/UncGJxWJvwv3nQ1K1Sq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b95679a64aa33e5859558f0ba3d96c2
Files
-
0b95679a64aa33e5859558f0ba3d96c2.exe windows:5 windows x86 arch:x86
421485da8a1d0f66c5ca03dfd0dc2ff2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
advapi32
RegQueryValueExA
ole32
CoInitialize
shell32
ShellExecuteA
oleaut32
SysFreeString
shlwapi
PathGetArgsA
ws2_32
closesocket
netapi32
Netbios
Sections
.text Size: 70KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE