Static task
static1
Behavioral task
behavioral1
Sample
11f0a6ac77563cf8c37aa5e4339de465.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11f0a6ac77563cf8c37aa5e4339de465.exe
Resource
win10v2004-20231215-en
General
-
Target
11f0a6ac77563cf8c37aa5e4339de465
-
Size
250KB
-
MD5
11f0a6ac77563cf8c37aa5e4339de465
-
SHA1
96b22e71c7f0dafe07544180bf14db5ed8376321
-
SHA256
7edf1af71a64d678b9e5485d5be752f5c9425dd7e572e27e4d2a4e9f50dcb841
-
SHA512
f7f3e1b5cf836fae9b066a0382e71f08e32608c73df39a034d899a78d5e262baf386e431bd0e8250c93282b6ec8b767cc9e5ca7da183b2b84c92379a27e3faec
-
SSDEEP
6144:WYQmWkVDrRIsNIS7swxT1gqF1+QhExEGm/AAV9TS6hF/+Z2:WfkVPCKl4wxT1gw08ExEGYAgVS6L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11f0a6ac77563cf8c37aa5e4339de465
Files
-
11f0a6ac77563cf8c37aa5e4339de465.exe windows:4 windows x86 arch:x86
ccb0f396632b5742b97074869f3b30ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemAlloc
comctl32
ImageList_SetIconSize
wininet
InternetGetConnectedState
urlmon
URLDownloadToFileA
Sections
CODE Size: 238KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE