Static task
static1
Behavioral task
behavioral1
Sample
0bd91565bd8040f5064285ffc2c42ca3d1a02b89236bc04ae7b12fdb627d105e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0bd91565bd8040f5064285ffc2c42ca3d1a02b89236bc04ae7b12fdb627d105e.exe
Resource
win10v2004-20240709-en
General
-
Target
0bd91565bd8040f5064285ffc2c42ca3d1a02b89236bc04ae7b12fdb627d105e
-
Size
905KB
-
MD5
052b276bb59d16c1dd76f79137410df1
-
SHA1
c4355590402e8ae7912b97880db596f8c649468e
-
SHA256
0bd91565bd8040f5064285ffc2c42ca3d1a02b89236bc04ae7b12fdb627d105e
-
SHA512
cef402a4fabc90ee80475d21205000b1a4091ff13bfc5b99df1414e30fda817575b6d5686bab8eb1c42a548c8083a7f2985e03cd2ff45060320e1a21d227bf36
-
SSDEEP
96:8ufPG/bXeyV0UYDv92+uA8JvU3j4JOYtAUnIgQaDe:dfPG/lV0UYDvfuAovhauIgQaDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bd91565bd8040f5064285ffc2c42ca3d1a02b89236bc04ae7b12fdb627d105e
Files
-
0bd91565bd8040f5064285ffc2c42ca3d1a02b89236bc04ae7b12fdb627d105e.exe windows:5 windows x86 arch:x86
6917a0ad1f780cfb5562f698345f9b24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateToolhelp32Snapshot
Process32NextW
WaitForSingleObject
Process32FirstW
SetLastError
GetLastError
SetThreadPriority
lstrcmpW
GetModuleFileNameW
Sleep
OpenProcess
GetCurrentThread
ExitProcess
lstrcpyA
HeapAlloc
GetProcessHeap
lstrlenA
GetCommandLineA
IsProcessorFeaturePresent
advapi32
OpenServiceW
RegCloseKey
RegisterServiceCtrlHandlerW
SetServiceStatus
ChangeServiceConfigW
DuplicateTokenEx
ChangeServiceConfig2W
RegOpenKeyW
CreateProcessAsUserW
RegQueryValueExW
StartServiceCtrlDispatcherW
OpenSCManagerW
OpenProcessToken
CloseServiceHandle
CreateServiceW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE