Start
Static task
static1
Behavioral task
behavioral1
Sample
0b14e14e07c520b688164652af40ec1e039aa5be39e0f192f0aef21814fbc956.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
0b14e14e07c520b688164652af40ec1e039aa5be39e0f192f0aef21814fbc956.exe
Resource
win11-20240214-en
General
-
Target
0b14e14e07c520b688164652af40ec1e039aa5be39e0f192f0aef21814fbc956
-
Size
2.2MB
-
MD5
30d03dc2142aa0c7b4258e0035c01f3c
-
SHA1
6ad834e3a4185a7ad246ecd92fdf320f625928a5
-
SHA256
0b14e14e07c520b688164652af40ec1e039aa5be39e0f192f0aef21814fbc956
-
SHA512
7432315a74e25bd20b07b66131b57b672671efb2fae12ffaa8473d52a94a20001b1db6a303e4c6b937005467fcdb3225b23e220cf626429c2afc77d101f88af1
-
SSDEEP
49152:js9NRR5MmyC8+C+HSsIQgC7A5RY1Iud1ORiIN3wIK:jQNRG3eSsIQgC7A81Is1OUWAI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b14e14e07c520b688164652af40ec1e039aa5be39e0f192f0aef21814fbc956
Files
-
0b14e14e07c520b688164652af40ec1e039aa5be39e0f192f0aef21814fbc956.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kttvcttn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nvontqsr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE