Static task
static1
Behavioral task
behavioral1
Sample
11d28a40a041c22d55dc98bad147289f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
11d28a40a041c22d55dc98bad147289f.exe
Resource
win10v2004-20231222-en
General
-
Target
11d28a40a041c22d55dc98bad147289f
-
Size
526KB
-
MD5
11d28a40a041c22d55dc98bad147289f
-
SHA1
b78feada5ead4ef1ec11dd1ae37cd2d0c98a299c
-
SHA256
eb068b3077146859e9d38facd6a740c80700ce29332c66595af7e0ef28b3520f
-
SHA512
19f9da1e0d90f3f9596b78a7c5c3caab32cd2bc71e3c77bdb1dd6119fc826ce1a75f6cd50ebbbb2dd0aaf758ec10ccb9c8000e344fe248640bb8b243384218e1
-
SSDEEP
12288:cXBcoG/wa2m7MaWnfyihCd4FWFTa5rk8jNo+e:cX69/J28M/ysjWFTa5rkAk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d28a40a041c22d55dc98bad147289f
Files
-
11d28a40a041c22d55dc98bad147289f.exe windows:4 windows x86 arch:x86
dac09c87bde723c0ef10296f9ceda78d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteEx
FreeIconList
DuplicateIcon
SHChangeNotify
comdlg32
PageSetupDlgW
ReplaceTextA
user32
SendInput
DdeInitializeA
GetClassLongW
GetShellWindow
RegisterClassA
RegisterClassExA
ChangeDisplaySettingsExW
GetMenuInfo
ToAsciiEx
GetOpenClipboardWindow
DdeKeepStringHandle
LoadStringA
DispatchMessageW
GetKeyboardType
CharUpperW
FlashWindowEx
BroadcastSystemMessage
GetMenuContextHelpId
MessageBoxIndirectW
PostThreadMessageA
comctl32
InitCommonControlsEx
advapi32
ReportEventA
InitiateSystemShutdownW
RevertToSelf
RegQueryMultipleValuesA
RegCreateKeyA
LookupPrivilegeValueW
kernel32
GetEnvironmentVariableW
SetFilePointer
MultiByteToWideChar
IsValidLocale
WriteConsoleW
GetDateFormatA
TlsGetValue
GetStartupInfoA
CreateFileA
SetEnvironmentVariableA
SetHandleCount
TlsFree
LeaveCriticalSection
ReadFile
GetLocaleInfoA
EnumResourceTypesW
FreeLibrary
OpenMutexA
LCMapStringW
QueryPerformanceCounter
SetLastError
InterlockedDecrement
SetCurrentDirectoryA
GetLocaleInfoW
LCMapStringA
EnterCriticalSection
GetUserDefaultLCID
GetModuleHandleA
GetCompressedFileSizeW
GetTempFileNameA
VirtualQuery
GetStdHandle
LoadLibraryA
GetFileType
GetConsoleScreenBufferInfo
CreateMutexA
TlsSetValue
VirtualAlloc
SetStdHandle
HeapDestroy
GetMailslotInfo
DeleteCriticalSection
Sleep
IsValidCodePage
GetEnvironmentVariableA
GetCPInfo
WriteConsoleA
IsDebuggerPresent
GetStringTypeW
TlsAlloc
HeapCreate
GetCurrentProcessId
GetCurrentProcess
GetOEMCP
CompareStringW
GetCurrentThreadId
FreeEnvironmentStringsW
EnumSystemLocalesA
GetModuleFileNameA
InterlockedIncrement
GetCurrencyFormatA
GetTimeFormatA
CreateMutexW
CompareStringA
GetACP
VirtualFree
GetEnvironmentStringsW
GetEnvironmentStrings
GetTickCount
GetConsoleCP
GetLastError
GetProcAddress
CloseHandle
ExitProcess
GetCommandLineA
GetPriorityClass
SetUnhandledExceptionFilter
WideCharToMultiByte
HeapSize
WriteProfileSectionA
SetConsoleCtrlHandler
OpenFileMappingW
InitializeCriticalSection
GetConsoleTitleA
GetProcessHeap
HeapAlloc
GetWindowsDirectoryW
GetConsoleOutputCP
WriteFile
HeapFree
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetTimeZoneInformation
UnhandledExceptionFilter
InterlockedExchange
GetStringTypeA
GetCurrentThread
DebugBreak
GetConsoleMode
FlushFileBuffers
TerminateProcess
HeapReAlloc
GetVersionExA
GetCompressedFileSizeA
RtlUnwind
Sections
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ