Static task
static1
Behavioral task
behavioral1
Sample
060dc8b57e54a161796d19a79a6c47771f35f4a90f9720ff6efd15a187d06b00.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
060dc8b57e54a161796d19a79a6c47771f35f4a90f9720ff6efd15a187d06b00.exe
Resource
win10v2004-20240426-en
General
-
Target
060dc8b57e54a161796d19a79a6c47771f35f4a90f9720ff6efd15a187d06b00
-
Size
40KB
-
MD5
8e865a1ec9f07f87908e9026bbb1ea0b
-
SHA1
cef0229463a6aa33faa1956f351a8524e2526a43
-
SHA256
060dc8b57e54a161796d19a79a6c47771f35f4a90f9720ff6efd15a187d06b00
-
SHA512
8f91ef138fb16bb6dd15f8c4287067d06a94ab3feb6ca24d7da6617d05da9d2bc55c4b471e97813f5dc7891feba776799e9a1dedb6483e79109b82e5e359734e
-
SSDEEP
384:H0NqwaXklRRvZxMR5QYKZseH5eAXZkbXSm10cz2TFUaMPbaDqcRM+ll4uWHfB:H0NqwbTzQDKVeA2bhpaPDqcRkRZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 060dc8b57e54a161796d19a79a6c47771f35f4a90f9720ff6efd15a187d06b00
Files
-
060dc8b57e54a161796d19a79a6c47771f35f4a90f9720ff6efd15a187d06b00.exe windows:5 windows x86 arch:x86
f08fb13efbf8ba797507962ac13ecc2f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cabinet
ord13
gdi32
CreateDCA
GetWindowOrgEx
SetWindowOrgEx
kernel32
GetModuleHandleW
GetProcAddress
ExitProcess
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ