Static task
static1
Behavioral task
behavioral1
Sample
0f26b81e342ea7a2547d915f7203b79f9972abb5e622d0af1f0b2643e2099f20.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f26b81e342ea7a2547d915f7203b79f9972abb5e622d0af1f0b2643e2099f20.exe
Resource
win10v2004-20240226-en
General
-
Target
0f26b81e342ea7a2547d915f7203b79f9972abb5e622d0af1f0b2643e2099f20
-
Size
53KB
-
MD5
a92108bea57c2199d53b2cbd86c49d16
-
SHA1
dccebd52a7b31189eb9dfb28aa838bbe7f380050
-
SHA256
0f26b81e342ea7a2547d915f7203b79f9972abb5e622d0af1f0b2643e2099f20
-
SHA512
dae8675fea6889b38a67a22de03cd69ec67c56590661557e70e3708556993ca464a46396a5c26c4569a849a1f67dc750693b376985dffb80ceeadc34f4a16114
-
SSDEEP
768:0NKG4ncwnclvnwm2vO/l4AS0j6zEiI84jP90zXd2gbxkt9fzKKxV2:0AfXclvQUl4AS0j6zEiI84zezXggS92
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f26b81e342ea7a2547d915f7203b79f9972abb5e622d0af1f0b2643e2099f20
Files
-
0f26b81e342ea7a2547d915f7203b79f9972abb5e622d0af1f0b2643e2099f20.exe windows:4 windows x86 arch:x86
ceb4df4fc7a32291bf4220f8b82c5b56
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadAcceleratorsA
LoadIconA
RegisterClassExA
GetMessageA
LoadStringA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
TranslateAcceleratorA
LoadCursorA
ShowWindow
CreateWindowExA
DefWindowProcA
SendMessageA
DestroyWindow
PostQuitMessage
SetFocus
UpdateWindow
kernel32
HeapAlloc
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetCommandLineA
GetProcessHeap
CreateDirectoryA
GetCommandLineW
lstrlenA
LoadLibraryA
WriteProcessMemory
gdi32
TextOutA
shell32
CommandLineToArgvW
wtsapi32
WTSEnumerateProcessesA
WTSLogoffSession
WTSQuerySessionInformationA
WTSWaitSystemEvent
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ