Static task
static1
Behavioral task
behavioral1
Sample
0f11dcda069d60f7f5d631720cf82b8b7d624d9fd869b7fd50567004b15bae03N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f11dcda069d60f7f5d631720cf82b8b7d624d9fd869b7fd50567004b15bae03N.exe
Resource
win10v2004-20240802-en
General
-
Target
0f11dcda069d60f7f5d631720cf82b8b7d624d9fd869b7fd50567004b15bae03N
-
Size
292KB
-
MD5
0d40e430c6e75062a19979135702af20
-
SHA1
01569ca62f57bc1c4778455c16bc81e9f6646d79
-
SHA256
0f11dcda069d60f7f5d631720cf82b8b7d624d9fd869b7fd50567004b15bae03
-
SHA512
386dd38d40607ae28000c1e88e5b94de6ee716362eb00664d6db8413d8060d69d92274ace31794111b6f96471b701259b0d6c892b61c6a49b99e2c2aca215be9
-
SSDEEP
6144:MA3YL7/M+h4X/S9GXj0n9g7/KB3y4bMUUro:MCYL7/M5SUwnyOfMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f11dcda069d60f7f5d631720cf82b8b7d624d9fd869b7fd50567004b15bae03N
Files
-
0f11dcda069d60f7f5d631720cf82b8b7d624d9fd869b7fd50567004b15bae03N.exe windows:4 windows x86 arch:x86
976d348bfb57f194939f1719c559e7e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
WriteConsoleW
GetFileAttributesW
WriteConsoleW
CopyFileA
GetCommandLineA
lstrcpyA
HeapDestroy
GetProcessHeap
GetModuleHandleA
SetEvent
DeleteFileA
VirtualProtect
ResumeThread
DisconnectNamedPipe
GetPriorityClass
lstrlenW
GetStartupInfoA
WriteConsoleW
GetCurrentDirectoryA
CreatePipe
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
CryptUIWizBuildCTL
CryptUIWizExport
CryptUIWizImport
CryptUIDlgViewContext
CryptUIWizDigitalSign
DllRegisterServer
CryptUIStartCertMgr
LocalEnroll
WizardFree
WizardFree
LocalEnroll
CryptUIWizBuildCTL
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 195B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE