Static task
static1
Behavioral task
behavioral1
Sample
8b2fbb83633d44exeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
8b2fbb83633d44exeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
8b2fbb83633d44exeexeexeex.exe
-
Size
10.0MB
-
MD5
8b2fbb83633d4440efa93aeb32079518
-
SHA1
6b36b3cc60155cb71fb582b45794f225a7caaa27
-
SHA256
80024994214f688771017aa3dedf4e5dbb3e36463307fc7b66ab5fbe45111741
-
SHA512
1193edfb8f051eb7545af2a4343a9ad7ceaa818a1fb9a1aba980f231490b32d7a9fd65b711f1a634b80caf822eb0d407942fbd5c9102468e02fe5f90abcb542d
-
SSDEEP
196608:GOch9ZqgTHCbPJsSK5Uof9FfVHpo9rQWQRtANJ6Oi+V:G1h9wICbRK5Uo49rQLe6t+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b2fbb83633d44exeexeexeex.exe
Files
-
8b2fbb83633d44exeexeexeex.exe.exe windows x86
11fba919564e991385e65b419d60cf71
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
FindResourceW
LoadResource
SizeofResource
GetLongPathNameW
FreeResource
CreateFileW
WriteFile
CloseHandle
CopyFileW
CreateProcessW
MoveFileExW
GetTempPathW
GetModuleFileNameW
LockResource
RemoveDirectoryW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
GetCommandLineW
RaiseException
RtlUnwind
HeapAlloc
CreateDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
GetCPInfo
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
HeapSize
GetProcessHeap
GetCurrentThreadId
GetStdHandle
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetACP
IsValidCodePage
GetOEMCP
HeapReAlloc
LoadLibraryExW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
advapi32
RegSetValueExW
RegCreateKeyExW
RegCloseKey
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11.6MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ