Static task
static1
Behavioral task
behavioral1
Sample
11388d622fce8e5e434e4d6bf50f4dc9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11388d622fce8e5e434e4d6bf50f4dc9.exe
Resource
win10v2004-20231215-en
General
-
Target
11388d622fce8e5e434e4d6bf50f4dc9
-
Size
43KB
-
MD5
11388d622fce8e5e434e4d6bf50f4dc9
-
SHA1
79a63774500cdbf9acccf9bf9e61bfe16b4cb18a
-
SHA256
e6f28f87dcfc9443c78f22a20e698bd13a3611c06eea0087514f9da8278671dc
-
SHA512
cc064af0854de5c6f30e99a4ed017f429abab4f3c0a62349c1c7b5730a0200b6aad13121a1bdd9368ac4ca7721571dcd2faba82855382c2c1642245c164893c4
-
SSDEEP
768:VZNVQHhp7cv8eTkwoUMoSR+ptP6cEQNFrOY8NWk0bTsyRHA1LSYmNKBW3FG2f:Vdv8iLoUMy6cFNZO/QN/hg1LSYmQ2Vf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11388d622fce8e5e434e4d6bf50f4dc9
Files
-
11388d622fce8e5e434e4d6bf50f4dc9.exe windows:5 windows x86 arch:x86
080fc9e51b51c0b87a224263222ce732
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItemTextA
LoadCursorW
kernel32
GetCurrentThreadId
Sections
.vmvit Size: 36KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tun Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mloxox Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ