Static task
static1
Behavioral task
behavioral1
Sample
11ac8fdfe02be6f9cd237fbd25b954e525472d7b19aa3a0d7adf086ad0ca41d2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11ac8fdfe02be6f9cd237fbd25b954e525472d7b19aa3a0d7adf086ad0ca41d2.exe
Resource
win10v2004-20240802-en
General
-
Target
11ac8fdfe02be6f9cd237fbd25b954e525472d7b19aa3a0d7adf086ad0ca41d2
-
Size
19KB
-
MD5
0f988825c500f1b7e5963796f36d278f
-
SHA1
d89eb6bba567e0810f49872a43e1fb9a9d517779
-
SHA256
11ac8fdfe02be6f9cd237fbd25b954e525472d7b19aa3a0d7adf086ad0ca41d2
-
SHA512
959536ce6bda5f5b1144370b3226055c6cf9be5ca111e0e20e49e4d059d8f58a7d69dc239884ac70b8f1e7685a97595738cdbc42781b3e7c848db2247efc7aab
-
SSDEEP
384:YQZqSstnLmJ1d6dzkT8OwNrSfB73TtWMiS2R3Xbr17vvxlL:lqSsE1EdgT8rgDtWfSW3Lx7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11ac8fdfe02be6f9cd237fbd25b954e525472d7b19aa3a0d7adf086ad0ca41d2
Files
-
11ac8fdfe02be6f9cd237fbd25b954e525472d7b19aa3a0d7adf086ad0ca41d2.exe windows:5 windows x86 arch:x86
7bef13f58538df84f5270fe7542e9811
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
SetTimer
shell32
ShellExecuteExW
ole32
CoInitializeEx
psapi
GetModuleBaseNameW
shlwapi
StrStrNIW
ntdll
memset
advapi32
RegFlushKey
Sections
.MPRESS1 Size: 15KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE