_wLoror0l@12
Static task
static1
Behavioral task
behavioral1
Sample
b9b2d30b608dca6bce0bb4bedcc3ebf4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b9b2d30b608dca6bce0bb4bedcc3ebf4.exe
Resource
win10v2004-20240226-en
General
-
Target
b9b2d30b608dca6bce0bb4bedcc3ebf4
-
Size
69KB
-
MD5
b9b2d30b608dca6bce0bb4bedcc3ebf4
-
SHA1
b5ca8d76b72f6aa2e28a3a8402e49fb0ea76f9bc
-
SHA256
6ab6c8e8059a0d6d74c043292d64c6817bbd6ce4cde16d1419381f2e119cf3db
-
SHA512
1747084c9529ef24d7b423d15a254c8a6754fb985e0a153e41194a387db53efd0688381e5f141b5591c80539c13a7f70e23de9a6963fa9cdeb817ecb7a10ac3b
-
SSDEEP
1536:QYhN+JA33e8kzKV+dMKgk2WkX7kUUYsZuGgq+p:Qa+JA3OFKV+i3Wky5uGGp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9b2d30b608dca6bce0bb4bedcc3ebf4
Files
-
b9b2d30b608dca6bce0bb4bedcc3ebf4.exe windows:4 windows x86 arch:x86
83dd97879350ff4905f215569372006c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragQueryFileA
Shell_NotifyIconW
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFolderPathA
user32
GetCursor
SetMenu
SetMenuItemInfoA
SetFocus
SetPropA
SetForegroundWindow
kernel32
GetThreadLocale
GetStringTypeA
GetSystemDefaultLangID
GetStringTypeW
LoadLibraryA
VirtualAllocEx
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/DIALOG/TEXTFILEDLG
-
.rsrc/0/MANIFEST/1.xml
-
.rsrc/0/RCDATA/DVCLAL
-
.rsrc/0/STRING/4094
-
.rsrc/0/STRING/4095
-
.rsrc/1033/BITMAP/BBABORT.bmp
-
.rsrc/1033/version.txt
-
.text