Static task
static1
Behavioral task
behavioral1
Sample
0d5779f88b650e87f98a1cb07ce02fb4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d5779f88b650e87f98a1cb07ce02fb4.exe
Resource
win10v2004-20231215-en
General
-
Target
0d5779f88b650e87f98a1cb07ce02fb4
-
Size
43KB
-
MD5
0d5779f88b650e87f98a1cb07ce02fb4
-
SHA1
16a0545f8ef9dd734f3a26f8679ea4ad34bdfc9e
-
SHA256
09a0f63e67f83ce0e0940b7c227b35df1820e2ae42699fbe5179c35ae0e02218
-
SHA512
1f54ccf3563e957cd4259fcc192d497cc7d57a9b30499463b725e4cebb3c8b21f48c289d6f99251091ea64db6d9f3b943115aa64f6c3d71e915a931919ffc369
-
SSDEEP
768:FZ9ITb/Ul+lM88bwfYpjMwjsHDxm0DG02t3e+YN61mZ2BK1:dhleFfwMwjP0MU+bmJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d5779f88b650e87f98a1cb07ce02fb4
Files
-
0d5779f88b650e87f98a1cb07ce02fb4.exe windows:5 windows x86 arch:x86
36a1627833c6620a1012520cb164788f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatW
lstrcpynW
MultiByteToWideChar
CreateProcessW
GetTempPathW
ExpandEnvironmentStringsW
lstrlenA
HeapAlloc
GetCurrentThread
FindClose
CreateFileMappingW
GetModuleFileNameA
WriteFile
ReleaseMutex
SetEvent
CreateThread
FlushFileBuffers
SetFileTime
OpenProcess
GetSystemTime
DisconnectNamedPipe
GetSystemTimeAsFileTime
SetFileAttributesW
GlobalLock
GetTimeZoneInformation
SetLastError
CreateEventW
EnterCriticalSection
GetUserDefaultUILanguage
CloseHandle
user32
GetDlgItemTextW
Sections
.jgj Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pyb Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bchkj Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ