Static task
static1
Behavioral task
behavioral1
Sample
09f085dcce0e9f6446af25ad33d74e9c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
09f085dcce0e9f6446af25ad33d74e9c.exe
Resource
win10v2004-20231215-en
General
-
Target
09f085dcce0e9f6446af25ad33d74e9c.exe
-
Size
275KB
-
MD5
09f085dcce0e9f6446af25ad33d74e9c
-
SHA1
7fbf710f909e30d8565505eb8194e698d9081239
-
SHA256
74ef323b54cd2803a1a545160f3619d9471e09ea58dab87afdadd29c818e6ee9
-
SHA512
9369469e3eaaee2820f0f6ee8da44ceb7017d713c40c369b25d32efd3dcce201cc3836a9b087da52835902ac2ea89ee85f53730d4eb3dbe4b43ab8959c601d79
-
SSDEEP
6144:LFnoWpPIsnK4UTI2/z1E25G9MrujRIEsiNmJGQIbhrLthCOmubFN:pnHpgsK/IH2brgRIJiNmx81wO5ZN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09f085dcce0e9f6446af25ad33d74e9c.exe
Files
-
09f085dcce0e9f6446af25ad33d74e9c.exe.exe windows:4 windows x86 arch:x86
16ac7bc08f2fa016182d7b7a6ffe6135
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
VirtualAlloc
VirtualFree
GetBinaryTypeA
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW
oleaut32
SafeArraySetRecordInfo
SysAllocStringByteLen
SafeArrayGetVartype
SysReAllocStringLen
OleLoadPictureFileEx
ClearCustData
OleLoadPictureFile
msvfw32
ICInfo
Sections
.text Size: 170KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ