Static task
static1
Behavioral task
behavioral1
Sample
0e42591ddccecccf18c9241899254f1b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e42591ddccecccf18c9241899254f1b.exe
Resource
win10v2004-20231222-en
General
-
Target
0e42591ddccecccf18c9241899254f1b
-
Size
15KB
-
MD5
0e42591ddccecccf18c9241899254f1b
-
SHA1
75f8ce096009906baa999b3699f7c4718a57c053
-
SHA256
7ea96b5fbdfd1abfc1015371f5502540cdc71d5e97fc04789f4d88b1f8d3729a
-
SHA512
7012f3a4ef62f6a7a0f5c02093afa7a2ad526c7953304ee810d513b09517879290481918ef4bf30fa9d82ea0411362c2285b86a3707df4a057eb2bbfdf76c535
-
SSDEEP
384:xr3ZIS0jQcukMyy/yFGoXpQwYktDBRChy/o5:tWJscur9qFG6acRCw/o5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e42591ddccecccf18c9241899254f1b
Files
-
0e42591ddccecccf18c9241899254f1b.exe windows:4 windows x86 arch:x86
6bb825949a4a96c94bad3eb2ba99752f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
advapi32
RegCloseKey
iphlpapi
GetIfTable
mpr
WNetGetUserA
shell32
ShellExecuteA
user32
SetTimer
winmm
mixerOpen
wsock32
send
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE