Static task
static1
Behavioral task
behavioral1
Sample
096a92e0eda913dda822ed4a239081b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
096a92e0eda913dda822ed4a239081b9.exe
Resource
win10v2004-20231215-en
General
-
Target
096a92e0eda913dda822ed4a239081b9.exe
-
Size
51KB
-
MD5
096a92e0eda913dda822ed4a239081b9
-
SHA1
def716af564242eead07f70d09a4e8729408a1be
-
SHA256
b4cb0bd4513e5deedd6f54da567c53e2f71cefc847f549d93f82cfcbc35a1530
-
SHA512
8db274bfe3a5f516822ad85760e78dc6bdac41e5c2281ed4aa0d3694105ce58acf9b9ad8d0c4824eabd83806156a3d8b10ce3ab2952f7efc190542be6b96b8bd
-
SSDEEP
768:aaRDXpEYywAWM1S8JF6IDAau93hRVAh2cNBtrrf3E/VChU742ZjwFehOoE:fp5vPAqxek3h4PNBtjU/p42Zkmg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 096a92e0eda913dda822ed4a239081b9.exe
Files
-
096a92e0eda913dda822ed4a239081b9.exe.exe windows:5 windows x86 arch:x86
8592e931ff743483bcf7561ea121343e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptAcquireContextW
CryptDestroyHash
GetUserNameW
RegEnumKeyExA
shlwapi
PathFileExistsW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
wvnsprintfA
wvnsprintfW
user32
CharLowerBuffA
CloseWindowStation
DispatchMessageA
DrawIcon
GetKeyboardState
GetKeyState
GetMenuItemID
GetWindowLongA
GetWindowThreadProcessId
PeekMessageA
SetProcessWindowStation
SetThreadDesktop
Sections
.kzupgf Size: 42KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pwb Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dsl Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ