Static task
static1
Behavioral task
behavioral1
Sample
8c1a873c8d09dbe4a1b6b9f4f1433d0593726f397277d0fa613118c1f0b93733.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8c1a873c8d09dbe4a1b6b9f4f1433d0593726f397277d0fa613118c1f0b93733.exe
Resource
win10v2004-20230703-en
General
-
Target
8c1a873c8d09dbe4a1b6b9f4f1433d0593726f397277d0fa613118c1f0b93733
-
Size
4.6MB
-
MD5
eff25680d5f4547775974abea69b8669
-
SHA1
0205174937678de624117c25083f2b65280ba5ee
-
SHA256
8c1a873c8d09dbe4a1b6b9f4f1433d0593726f397277d0fa613118c1f0b93733
-
SHA512
3d10929438b0a428e75bd10d422c1ab4b564add15595db549517534079ae20e7d794a61996108beeaed8ec7200c3d78fb03be05471aba0b10efbde2ee406fa19
-
SSDEEP
98304:a5TtusaFMlQM6Rfl1xfTdMKGtVaXvaFUv+Clz1SEo:0xpnlb6RJTdMKGtgXXv+CzFo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1a873c8d09dbe4a1b6b9f4f1433d0593726f397277d0fa613118c1f0b93733
Files
-
8c1a873c8d09dbe4a1b6b9f4f1433d0593726f397277d0fa613118c1f0b93733.exe windows x86
6c4fad1e3819bf1fd0e25cc56e120552
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetEnvironmentStrings
user32
LoadStringA
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
_TrackMouseEvent
ws2_32
WSACleanup
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.6MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ