Static task
static1
Behavioral task
behavioral1
Sample
11e9c309e4701802360bad366f2b0fab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11e9c309e4701802360bad366f2b0fab.exe
Resource
win10v2004-20231215-en
General
-
Target
11e9c309e4701802360bad366f2b0fab
-
Size
76KB
-
MD5
11e9c309e4701802360bad366f2b0fab
-
SHA1
6962233894ff5c78e7643974177c176182029d3b
-
SHA256
5c6d7269b5af278842e04f7a995052c3be18b74b98a7a038807fb21a6bbb47bf
-
SHA512
ecf1bfea6a98526e99d1e7ed4a64056ecea8949d2ce34c95bffc832f650e02bed8f70c1cf1a098f37187605d6cd33012cbd154a8103000a026bc73355b9f5aa0
-
SSDEEP
1536:IPVmEPiEGT1cdEFyIXD1WEFeXh195pjVrs2ryrd1vUQuq6:M8u6yIXDQEFeXh195Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e9c309e4701802360bad366f2b0fab
Files
-
11e9c309e4701802360bad366f2b0fab.exe windows:4 windows x86 arch:x86
6518a3b69184490faa7153bf03982b4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
SetConsoleTitleW
LocalLock
FindNextVolumeMountPointW
DebugBreak
CreateThread
GetLinguistLangSize
GetEnvironmentStringsA
VirtualProtectEx
GetPrivateProfileIntW
IsValidCodePage
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE