Static task
static1
Behavioral task
behavioral1
Sample
0a0e9e86a06f617ed96f83a04a0e52ad17e57f9fc2c11695e8d14dbfd322a6c0.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a0e9e86a06f617ed96f83a04a0e52ad17e57f9fc2c11695e8d14dbfd322a6c0.exe
Resource
win10v2004-20240508-en
General
-
Target
0a0e9e86a06f617ed96f83a04a0e52ad17e57f9fc2c11695e8d14dbfd322a6c0
-
Size
30KB
-
MD5
e08311121903140147725d5c1206037f
-
SHA1
d6743f75a8fe77a7d51221bccfa4758e0f4d5a4f
-
SHA256
0a0e9e86a06f617ed96f83a04a0e52ad17e57f9fc2c11695e8d14dbfd322a6c0
-
SHA512
1a88fe50b4c72e92cc47f9599d3dcb516c06fff001f16feeb5cc3f188268031140b702ee588b85bdc41ea9a3068e6409e84c72a4a2fa53e35786d0a14dccbea8
-
SSDEEP
384:NaBJxeUjE7dPcmST3AB3q2p+UwVYly7cNKX9uCpPICbpwLcDQm9vbhtBFn:NK2UjEB0XaHjly7cNO95wwDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a0e9e86a06f617ed96f83a04a0e52ad17e57f9fc2c11695e8d14dbfd322a6c0
Files
-
0a0e9e86a06f617ed96f83a04a0e52ad17e57f9fc2c11695e8d14dbfd322a6c0.exe windows:4 windows x86 arch:x86
d5201b35184f2af59bba41345786528e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantTimeToSystemTime
kernel32
LoadLibraryA
GetDateFormatA
GetTimeFormatA
GetLocalTime
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
LocalFree
WideCharToMultiByte
GetCommandLineW
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LCMapStringA
msvcrt
strncmp
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
_ftol
sprintf
strncpy
modf
strchr
memmove
malloc
free
user32
wsprintfA
MessageBoxA
shell32
CommandLineToArgvW
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE