Static task
static1
Behavioral task
behavioral1
Sample
0912d6911e388dbb8fb7a5b1c50a19a5a6b109e53026410f26793da6a2c1b8fa.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0912d6911e388dbb8fb7a5b1c50a19a5a6b109e53026410f26793da6a2c1b8fa.exe
Resource
win10v2004-20240709-en
General
-
Target
0912d6911e388dbb8fb7a5b1c50a19a5a6b109e53026410f26793da6a2c1b8fa
-
Size
5.9MB
-
MD5
d5c10f05355fac64475e9234abf36721
-
SHA1
7ea72d3ffb0453ced2bfb37ef141c0699480e79c
-
SHA256
0912d6911e388dbb8fb7a5b1c50a19a5a6b109e53026410f26793da6a2c1b8fa
-
SHA512
a676b3047fe24d84a439a3c345830a1d13e9f552adf33e7dba7c3306b6970044bdf5e5825af8a9806e8d15301f8d1c0ced6ff765edb78d402c3fe710bda43509
-
SSDEEP
98304:tEjWObsZYj76DU2Cl4fJnazc0FFW9W688u0MQcyPZkzMwT2Y0zKs9+HF3xeHktlw:KSOEuHYZcXbWrBLYzB2PzKswHxA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0912d6911e388dbb8fb7a5b1c50a19a5a6b109e53026410f26793da6a2c1b8fa
Files
-
0912d6911e388dbb8fb7a5b1c50a19a5a6b109e53026410f26793da6a2c1b8fa.exe windows:5 windows x86 arch:x86
e2f155456ce38afb01273d3e0282b092
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord823
msvcrt
_controlfp
kernel32
ExitProcess
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetDesktopWindow
CharUpperBuffW
shell32
SHChangeNotify
shlwapi
SHDeleteKeyA
ws2_32
setsockopt
iphlpapi
GetIfTable
Sections
.text Size: - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.D;V Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. mS Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.j6R Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.]U` Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ