Static task
static1
Behavioral task
behavioral1
Sample
c8c95b35e5b83e293882e68898b73e85c6e49bde0613c0a63604928626cd8939.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c8c95b35e5b83e293882e68898b73e85c6e49bde0613c0a63604928626cd8939.exe
Resource
win10v2004-20230703-en
General
-
Target
c8c95b35e5b83e293882e68898b73e85c6e49bde0613c0a63604928626cd8939
-
Size
3.5MB
-
MD5
0a445cc8dedb6cdad0b9de66d0b3d6c2
-
SHA1
68702ab32473d222e01df4c5379f839372b22fa7
-
SHA256
c8c95b35e5b83e293882e68898b73e85c6e49bde0613c0a63604928626cd8939
-
SHA512
983864e516f8624365584d010c29fee21801aecb9f9f7ef6deb26b22d6997f184c2166df5593f341b9d7a2fabab9eeb7c79c50d82907c8b44630f68e8ab163ce
-
SSDEEP
98304:5wqa1Ep6fAMoFdAdlG9rFm5HyIhqdpS3omJky2RPSzAsg:qqxQAN+rG9rFsHyIhqfkbJaLsg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8c95b35e5b83e293882e68898b73e85c6e49bde0613c0a63604928626cd8939
Files
-
c8c95b35e5b83e293882e68898b73e85c6e49bde0613c0a63604928626cd8939.exe windows x86
c7a59fd05f02f21ff21aee5552fd5dd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
user32
GetMenuItemCount
gdi32
SelectPalette
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetUBound
comctl32
ord17
ws2_32
recvfrom
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.5MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 996KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ