Static task
static1
Behavioral task
behavioral1
Sample
8658e6d8cdee8ae847d8d76b0ac69cc04b5622d20b3680306eda0882a3e3c33f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8658e6d8cdee8ae847d8d76b0ac69cc04b5622d20b3680306eda0882a3e3c33f.exe
Resource
win10v2004-20230915-en
General
-
Target
8658e6d8cdee8ae847d8d76b0ac69cc04b5622d20b3680306eda0882a3e3c33f
-
Size
8.1MB
-
MD5
8146c5063850cc415b04ca36435a5358
-
SHA1
36490c9b0fb6e4f91ba424601317d8e640f5e0eb
-
SHA256
8658e6d8cdee8ae847d8d76b0ac69cc04b5622d20b3680306eda0882a3e3c33f
-
SHA512
d300e991b08e5ee4921165a4012db8dda25541071c473658aae1a92483303c9cd69c80f5bd4beb350e532d8cf599a938c3890f925c451c55f1741ff4d7411df2
-
SSDEEP
196608:nT0QnM6+4wQdW61rqN/FTZjTqs2FTFUo0pavwv4Uuv:nwQnMHtQdW8k9TFTkFTl0QvwQb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8658e6d8cdee8ae847d8d76b0ac69cc04b5622d20b3680306eda0882a3e3c33f
Files
-
8658e6d8cdee8ae847d8d76b0ac69cc04b5622d20b3680306eda0882a3e3c33f.exe windows:5 windows x86
e26ca7e4c95b94aa66ee6ce4e336d645
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassA
gdi32
SetBkMode
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
GetJobA
advapi32
OpenThreadToken
shell32
SHAppBarMessage
comctl32
ImageList_AddMasked
shlwapi
PathRemoveExtensionA
ole32
OleSetContainedObject
oleaut32
SafeArrayDestroy
oledlg
ord4
winmm
PlaySoundA
gdiplus
GdipGetImagePaletteSize
oleacc
LresultFromObject
imm32
ImmGetOpenStatus
Sections
.text Size: 8.0MB - Virtual size: 11.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE