Static task
static1
Behavioral task
behavioral1
Sample
8cdd6498d5b65cdbbf12b61b2669f3580dafc068e0f427acc78bb624674389ad.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8cdd6498d5b65cdbbf12b61b2669f3580dafc068e0f427acc78bb624674389ad.exe
Resource
win10v2004-20230703-en
General
-
Target
8cdd6498d5b65cdbbf12b61b2669f3580dafc068e0f427acc78bb624674389ad
-
Size
188KB
-
MD5
871936fa101372d9fd3947034786634f
-
SHA1
cf40b2c303cad97a3d58e027b22f98c25cfb2bbc
-
SHA256
8cdd6498d5b65cdbbf12b61b2669f3580dafc068e0f427acc78bb624674389ad
-
SHA512
ede608c3b3bf4c1651b5b0969b99a7a380214240a5f50036025c373142e8a96808ca517d5bf73fffb3fd60154080768254ceec614b910a5aac41c3978b26f598
-
SSDEEP
1536:6LEhGjAs176O2XRJUKJ/DVO7nAU0WYjKgCRy2C/eoE40WZ:6LEZsZ6O2XRGg7g7nAHWYjaXoE40W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cdd6498d5b65cdbbf12b61b2669f3580dafc068e0f427acc78bb624674389ad
Files
-
8cdd6498d5b65cdbbf12b61b2669f3580dafc068e0f427acc78bb624674389ad.exe windows x86
a651c4f4ae6e3fcece7fb6f56f0299a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
CloseHandle
WaitForSingleObject
CreateThread
CreateEventA
Sleep
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
InterlockedDecrement
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
MultiByteToWideChar
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WideCharToMultiByte
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
HeapFree
FlushFileBuffers
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
InterlockedIncrement
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapCreate
user32
CharNextA
DispatchMessageA
GetMessageA
PostThreadMessageA
ole32
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
RegisterTypeLi
SysAllocString
LoadTypeLi
SysFreeString
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ