Static task
static1
Behavioral task
behavioral1
Sample
8db8153aabb03dcd2944a81705ee757ebf75298d6d22925a32f7b4fb084d2373.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8db8153aabb03dcd2944a81705ee757ebf75298d6d22925a32f7b4fb084d2373.exe
Resource
win10v2004-20230915-en
General
-
Target
8db8153aabb03dcd2944a81705ee757ebf75298d6d22925a32f7b4fb084d2373
-
Size
16.0MB
-
MD5
a9cf0a26dc7e47b548cddf7a911a0f44
-
SHA1
6f93ecd276da1c84fbec1e6efb79065a4a7e96c3
-
SHA256
8db8153aabb03dcd2944a81705ee757ebf75298d6d22925a32f7b4fb084d2373
-
SHA512
0ca37d3c1a0658cdb7b03431764bb87216911caea25ac71d230a6c37854561c8e7e43da65a8becff655187d192092e97692361dde3bf050b646bc27097e97813
-
SSDEEP
393216:6U0q5ikca45ESQNYJScB2Lp1sVxvfN0FIidfsrwKPS:IQca4mNn0GpGvfNOIidfsrtS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8db8153aabb03dcd2944a81705ee757ebf75298d6d22925a32f7b4fb084d2373
Files
-
8db8153aabb03dcd2944a81705ee757ebf75298d6d22925a32f7b4fb084d2373.exe windows x86
e79ead0bec870cf68bbcdb019a3d0d3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetSysColorBrush
CharUpperBuffW
gdi32
CreateBitmap
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
LookupPrivilegeValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetLBound
comctl32
ImageList_Read
wininet
InternetCanonicalizeUrlA
Sections
T-VMP Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 598KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 4.8MB
IMAGE_SCN_MEM_EXECUTE
T-VMP Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 13.7MB - Virtual size: 13.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 552KB - Virtual size: 550KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ