Static task
static1
Behavioral task
behavioral1
Sample
0f391d0df37b28cedc12efdea32f1a21.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f391d0df37b28cedc12efdea32f1a21.exe
Resource
win10v2004-20231215-en
General
-
Target
0f391d0df37b28cedc12efdea32f1a21
-
Size
89KB
-
MD5
0f391d0df37b28cedc12efdea32f1a21
-
SHA1
5346c41bd13eb8b23abff4ebf091b4a67678f346
-
SHA256
63a2545b82c5e1d1544924a770e07394e7ef8108d7a9ff0e91ad4b2e393606b2
-
SHA512
db40a0aef2a8d3fdec950cf5205dd630003363476c04afa3a27612278c94896a8a0878272138ff96f96dde4f8a0f51afbc96854f6195478043e7059b9ef224fb
-
SSDEEP
768:8Ln2mXHRwnlkKPJU/V4Uk1AW4sfILv0rHyIJ/vP59+CwbCVMB4WkbTY:yNmpP+/ZKzfrHNPT+CwbCFT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f391d0df37b28cedc12efdea32f1a21
Files
-
0f391d0df37b28cedc12efdea32f1a21.exe windows:4 windows x86 arch:x86
76485263cf4d481094c652c5fda661ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CloseHandle
SetEvent
ReleaseMutex
GetModuleHandleA
GetLastError
CreateThread
FindClose
SearchPathA
lstrlenA
VirtualProtect
FindVolumeClose
DeleteCriticalSection
FindResourceExA
ExitProcess
TlsGetValue
GetCalendarInfoA
Sleep
GetDiskFreeSpaceA
FindAtomA
user32
GetScrollBarInfo
EndDialog
CopyImage
DispatchMessageA
GetUpdateRect
EnableWindow
CreateWindowExA
DialogBoxParamA
CreateMenu
IsIconic
GetMessageA
GetKeyState
CloseWindow
DragDetect
msdmo
DMOGetName
DMORegister
DMOUnregister
DMOGetTypes
DMOEnum
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
covxqte Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE