Static task
static1
Behavioral task
behavioral1
Sample
0bb628fccc1e6a778ed9a16c891c5378.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0bb628fccc1e6a778ed9a16c891c5378.exe
Resource
win10v2004-20231215-en
General
-
Target
0bb628fccc1e6a778ed9a16c891c5378
-
Size
208KB
-
MD5
0bb628fccc1e6a778ed9a16c891c5378
-
SHA1
0680ef5ab5f9baaaab09973a518c67065639d0f2
-
SHA256
9a6c013ff0f45fd2316cdbcfd86319b0768a158465ce4c0ea01a2942648892f2
-
SHA512
705ce30d3df7b60ff639f77f55484c755ea5dca1097a3e835ac8d59c838785fa980eb4ab56f917fe005c9df9f54d4b812bf31b1d8c1881e1307978644f1ae204
-
SSDEEP
3072:wlV+n6aurSfiQTElmFnAY9E/m5a0+CQd6Zs5hSL/SmBTEp66BIt5+NxTrXl7/52E:wl0n6aur2os4/mp+C+K/utIeJb5ARu1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bb628fccc1e6a778ed9a16c891c5378
Files
-
0bb628fccc1e6a778ed9a16c891c5378.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 203KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE