Static task
static1
Behavioral task
behavioral1
Sample
b118f7bfeb377d3944bc7a7d3b7c907967ad6669697df69a036060328d4bc1eb.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b118f7bfeb377d3944bc7a7d3b7c907967ad6669697df69a036060328d4bc1eb.exe
Resource
win10v2004-20240508-en
General
-
Target
b118f7bfeb377d3944bc7a7d3b7c907967ad6669697df69a036060328d4bc1eb
-
Size
1.2MB
-
MD5
44a259805268ce9dafc43aebfbb5e40f
-
SHA1
fc6880a063418ecdcb9db640612a4d5ecedaeeb2
-
SHA256
b118f7bfeb377d3944bc7a7d3b7c907967ad6669697df69a036060328d4bc1eb
-
SHA512
1f1db6827ef29189e75f06f85608120202d096169127e189d6e4061a8cd1caa42b1a91587cf4f8602ecfde0908642d0388141fe44eef939a44f687a86531923b
-
SSDEEP
12288:p6SlL8qX0+SWaAg0Rj1aV1RY7Q6/gnKmcMdsx/3Ot3s8fjVOJ/i6h62G0Go01x4y:p6SlL8qX0+S/0RstwxA8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b118f7bfeb377d3944bc7a7d3b7c907967ad6669697df69a036060328d4bc1eb
Files
-
b118f7bfeb377d3944bc7a7d3b7c907967ad6669697df69a036060328d4bc1eb.exe windows:5 windows x86 arch:x86
3f983312f069821372e5a31b6de8bc5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
SetConsoleTitleA
HeapAlloc
GetStringTypeA
lstrlenW
LoadLibraryExW
GetModuleHandleA
CreateMailslotA
AddAtomA
CopyFileA
GetProfileStringW
GetTempFileNameW
SetLastError
OpenSemaphoreA
ResetEvent
IsBadWritePtr
TlsGetValue
FindFirstFileW
GetProcAddress
FreeConsole
RemoveDirectoryW
GetBinaryTypeW
ReleaseMutex
WaitForSingleObjectEx
GetCurrencyFormatW
CloseHandle
GetVersionExA
CreateFileA
user32
CharNextA
LoadBitmapA
GetPropW
GetClassLongA
SetParent
DispatchMessageW
GetMonitorInfoA
DrawStateW
InsertMenuA
GetCaretPos
CharPrevA
CharToOemA
CreateDesktopA
LoadCursorW
IsCharAlphaW
dbnmpntw
ConnectionRead
ConnectionWrite
nddeapi
NDdeShareSetInfoA
NDdeShareEnumA
NDdeShareAddA
NDdeShareGetInfoA
NDdeShareDelA
esent
JetBeginTransaction
JetCommitTransaction
Sections
.text Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ