Static task
static1
Behavioral task
behavioral1
Sample
11d288750ca2974520d25dfb7ebf07b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11d288750ca2974520d25dfb7ebf07b5.exe
Resource
win10v2004-20231215-en
General
-
Target
11d288750ca2974520d25dfb7ebf07b5
-
Size
66KB
-
MD5
11d288750ca2974520d25dfb7ebf07b5
-
SHA1
108d2e14e87faed97e888e9e1b347c8e5f116d00
-
SHA256
4caa6cf865535aed549f5d91f0e3b04e749d3dc3a3eb2028248f366ab3c9a542
-
SHA512
080acf432f9f395fbc81617dd8610f0b496b2350bd0f892b08eb49b082dba6b25a5c701887b8c08afcaa87cbeb82e73bcf9ce351cbcfd2ac42470d849419d4df
-
SSDEEP
1536:VUuejfBj8VgcKsAnuW6geKuwPm4Pk1yIygOdS1m:VqfiKcKsAnuWxqwm4gTfOdS1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d288750ca2974520d25dfb7ebf07b5
Files
-
11d288750ca2974520d25dfb7ebf07b5.exe windows:4 windows x86 arch:x86
30484ba80e636a1e6fa228edc548cf49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetProcessHeap
GlobalUnlock
LoadLibraryExA
GetEnvironmentVariableA
GlobalFree
CreateFileA
TlsGetValue
FindResourceA
HeapCreate
lstrlenW
CloseHandle
TlsAlloc
DeleteAtom
SetLastError
CreateMutexA
GetExitCodeProcess
GetModuleHandleA
GetStdHandle
ReleaseMutex
user32
CallWindowProcA
FillRect
DrawMenuBar
SetFocus
CreateWindowExA
IsWindow
GetDC
GetDlgItem
CreateMenu
CheckRadioButton
GetCaretPos
DispatchMessageA
DrawEdge
rsaenh
CPDecrypt
CPGenKey
CPSignHash
CPHashData
CPDeriveKey
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
liqdsno Size: - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE