Static task
static1
Behavioral task
behavioral1
Sample
8c1bfb9f20cff1f56ce6b0cd53bcc30c050c922655099695e72c517af7806c95.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8c1bfb9f20cff1f56ce6b0cd53bcc30c050c922655099695e72c517af7806c95.exe
Resource
win10v2004-20230915-en
General
-
Target
8c1bfb9f20cff1f56ce6b0cd53bcc30c050c922655099695e72c517af7806c95
-
Size
4.2MB
-
MD5
e469e1d9df795de0b8d70b7d17bccdb8
-
SHA1
e5fffc3cae2dccac57c2430f26245ab3d5540ff0
-
SHA256
8c1bfb9f20cff1f56ce6b0cd53bcc30c050c922655099695e72c517af7806c95
-
SHA512
54ae66629d1b2582ac8a0c62b4e0ee48bc5ef5b71d6afa7b541a92e5fb767d6a02b8bc1c11379b6d341351a4a1623e18b471c00f51d25715048feb0a40411099
-
SSDEEP
98304:oLMHypXp7AGdbL5TzQ5LayWWjET3xJLgLYWNquC0KJpgr3DNz4z:oL5pXpvdH53UkT3ngLYWNC0GpYFu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1bfb9f20cff1f56ce6b0cd53bcc30c050c922655099695e72c517af7806c95
Files
-
8c1bfb9f20cff1f56ce6b0cd53bcc30c050c922655099695e72c517af7806c95.exe windows:4 windows x86
1c7a8e0d7d88a7149748b44e2b5cc33e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
WSAAsyncSelect
kernel32
SetLastError
user32
IsIconic
gdi32
GetViewportExtEx
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
wldap32
ord29
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
rasapi32
RasHangUpA
wininet
InternetOpenA
Sections
.text Size: 496KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ