Static task
static1
Behavioral task
behavioral1
Sample
d0f09bed40a892ced89f6da9116294d7e721215eeae6c36843376f2d2df6e0d4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0f09bed40a892ced89f6da9116294d7e721215eeae6c36843376f2d2df6e0d4.exe
Resource
win10v2004-20240226-en
General
-
Target
d0f09bed40a892ced89f6da9116294d7e721215eeae6c36843376f2d2df6e0d4
-
Size
41KB
-
MD5
59d4106f8179ab5f96bcb6afd41dfe2e
-
SHA1
4aee007cef9b16a4a7dfc639439590ebc5fa50c9
-
SHA256
d0f09bed40a892ced89f6da9116294d7e721215eeae6c36843376f2d2df6e0d4
-
SHA512
6aedfeaf9092986c7470ac280d867e1d7ab670a27f1ef71ca983499a446e7c2123249fd44c5d6364a75216a1c16235584cbaf5cde7a2a7d914db467e1085e87d
-
SSDEEP
384:KK+fKfzsqud1lubAK0s2y5V9yGQRSVnWLglN7r0Ct5Q0Iw:f+fAQqud1lKAKmy5ne+9lF0CtH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0f09bed40a892ced89f6da9116294d7e721215eeae6c36843376f2d2df6e0d4
Files
-
d0f09bed40a892ced89f6da9116294d7e721215eeae6c36843376f2d2df6e0d4.exe windows:4 windows x86 arch:x86
cc40fefa3af5cd00cc28dbd874038a4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc
wininet
HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile
shell32
ShellExecuteW
ntdll
RtlDecompressBuffer
swprintf
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ