Static task
static1
Behavioral task
behavioral1
Sample
0b90ef1ddb39246ac0543cb9265739d49dfdedc3f011715d82ccea4bbcaca035.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b90ef1ddb39246ac0543cb9265739d49dfdedc3f011715d82ccea4bbcaca035.exe
Resource
win10v2004-20240508-en
General
-
Target
0b90ef1ddb39246ac0543cb9265739d49dfdedc3f011715d82ccea4bbcaca035
-
Size
40KB
-
MD5
166ad1aa9afcfafb52e4ed3c00292218
-
SHA1
b67d51ebba1146951a07eb5619d4c64469aaa4a7
-
SHA256
0b90ef1ddb39246ac0543cb9265739d49dfdedc3f011715d82ccea4bbcaca035
-
SHA512
d551af7b4297d0dbeb139a13e1d8c1f8a7e69f1247fdfb24f80d5885cbda78f768665f10480e1054dded3af1590b7ca9d525c6580752c5660f806b588a154516
-
SSDEEP
768:A/E+UlejKbjWwKtUZS6KUAghE3c1ng8o6dlZYsp:AC2tUZdHAMEyngBISo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b90ef1ddb39246ac0543cb9265739d49dfdedc3f011715d82ccea4bbcaca035
Files
-
0b90ef1ddb39246ac0543cb9265739d49dfdedc3f011715d82ccea4bbcaca035.exe windows:4 windows x86 arch:x86
13169adaa55a4b4676c2eeddc904744e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
kernel32
lstrcpynA
GetFileType
CloseHandle
FindNextFileA
GetFileSize
DeleteFileA
FindFirstFileA
GetModuleHandleA
CreateFileA
GetStartupInfoA
GetLogicalDriveStringsA
GetEnvironmentStringsA
FindClose
GetModuleFileNameA
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ