Static task
static1
Behavioral task
behavioral1
Sample
c8f4f8c0737724a098fd2971555a1937854c4ccaa7225360089115649c179d01.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c8f4f8c0737724a098fd2971555a1937854c4ccaa7225360089115649c179d01.exe
Resource
win10v2004-20230703-en
General
-
Target
c8f4f8c0737724a098fd2971555a1937854c4ccaa7225360089115649c179d01
-
Size
2.9MB
-
MD5
84fc07946f19514d56808dbeafeac01b
-
SHA1
f31ac27fc06f16100786b9991e2c819416072d6f
-
SHA256
c8f4f8c0737724a098fd2971555a1937854c4ccaa7225360089115649c179d01
-
SHA512
871d6ada256662200b2a50a8aefb31a801ccd8b52fb63c2f061fedb59bbece0e491098bc64a9dc879ef24d835ea5da6d02488c2f1ffa89e1ae88285fd2e741bb
-
SSDEEP
49152:YdF4OT2xZecrfV1d2O3sFO+o8M7K8ERclvC+N0hXfNWbMdq9ltMxb9p9jcJJC4tP:YB2XZrN1QFO+o84mCnNmXPOP+x8C4px
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8f4f8c0737724a098fd2971555a1937854c4ccaa7225360089115649c179d01
Files
-
c8f4f8c0737724a098fd2971555a1937854c4ccaa7225360089115649c179d01.exe windows x86
c5f4fae9635b7eeac6085faa57e92d07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamOut
ws2_32
WSACleanup
user32
wvsprintfA
gdi32
CombineRgn
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
RevokeDragDrop
oleaut32
SafeArrayGetLBound
comctl32
_TrackMouseEvent
wininet
FindFirstUrlCacheEntryA
Sections
.text Size: 2.9MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE