Static task
static1
Behavioral task
behavioral1
Sample
11d1de2b62b8c62770a6e3041014e76c8d1e4cdbd763e8d4866e57a85ba34a37.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
11d1de2b62b8c62770a6e3041014e76c8d1e4cdbd763e8d4866e57a85ba34a37.exe
Resource
win10v2004-20240226-en
General
-
Target
11d1de2b62b8c62770a6e3041014e76c8d1e4cdbd763e8d4866e57a85ba34a37
-
Size
129KB
-
MD5
b9df4c987692990430c49493b1788bd1
-
SHA1
fcb2962c09170861dd72d658b6fcffa541cd302e
-
SHA256
11d1de2b62b8c62770a6e3041014e76c8d1e4cdbd763e8d4866e57a85ba34a37
-
SHA512
be9a2ae0d0e62317dd2af3a321c401aa659466676ceb5c434687ef0cb7f7e0e7fb7804fd916066d953ba5fed40d763dabc5f75831a94ac10fba003a0ef1225fe
-
SSDEEP
3072:5IMVZT5GqVXivkPtsCK8k9t3ywG3RY1W9V7l:5IMVhEdcFsChk95yvhO+l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d1de2b62b8c62770a6e3041014e76c8d1e4cdbd763e8d4866e57a85ba34a37
Files
-
11d1de2b62b8c62770a6e3041014e76c8d1e4cdbd763e8d4866e57a85ba34a37.exe windows:4 windows x86 arch:x86
9eadb38f691a0b93dce1ca2ec6b7fa7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetTempPathA
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
GetACP
user32
LoadAcceleratorsA
RegisterClassA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 8B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ