Static task
static1
Behavioral task
behavioral1
Sample
10bb80b6c8567745ca41f20f136c0b10.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10bb80b6c8567745ca41f20f136c0b10.exe
Resource
win10v2004-20231215-en
General
-
Target
10bb80b6c8567745ca41f20f136c0b10
-
Size
11KB
-
MD5
10bb80b6c8567745ca41f20f136c0b10
-
SHA1
5cbc7f4d7a90653a77cf932ca26055061bfcc3e2
-
SHA256
a665c640c2a0ba8e46be24917df458d322505456b6569477f1838d171f48e238
-
SHA512
b3d22e7846de916c42e7d7f9dec78fec46c4293ac8d8991c7d8cdbcfafd02153b88dbf752716a904734e3350e310620699924c1c5e2ae4abef123bb05b5e0f5e
-
SSDEEP
192:kL2UZwX4KGuzU3MWMrMmozFoB9FRYJFG2Gi6:Q7m4KN+MWMrGFoXFRYJc2D6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10bb80b6c8567745ca41f20f136c0b10
Files
-
10bb80b6c8567745ca41f20f136c0b10.exe windows:4 windows x86 arch:x86
4a0e8c8132b90d8ed3e1892061842032
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FreeLibrary
GetProcAddress
CreateEventA
lstrcpyA
GetLastError
lstrcatA
CreateToolhelp32Snapshot
WaitForSingleObject
Sleep
CloseHandle
DeleteFileA
ExitThread
LoadLibraryA
Process32First
Process32Next
FindResourceA
HeapAlloc
GetProcessHeap
HeapFree
lstrlenA
lstrcmpA
WaitForMultipleObjects
ResetEvent
CreateThread
SetEvent
WriteFile
GetSystemDirectoryA
CreateProcessA
SizeofResource
LoadResource
GetModuleFileNameA
user32
wsprintfA
CharUpperA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
advapi32
RegNotifyChangeKeyValue
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegCloseKey
RegSetValueExA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ