Static task
static1
Behavioral task
behavioral1
Sample
d8fec8161a239ca924e4180cfad93f392e60ea08385631f5d84e6bf9c22ef3fa.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d8fec8161a239ca924e4180cfad93f392e60ea08385631f5d84e6bf9c22ef3fa.exe
Resource
win10v2004-20230915-en
General
-
Target
d8fec8161a239ca924e4180cfad93f392e60ea08385631f5d84e6bf9c22ef3fa
-
Size
207KB
-
MD5
944c91705893cf9bd6a70ff400ecc8aa
-
SHA1
e4f8905809642e20af53670bb4f772de04ef146a
-
SHA256
d8fec8161a239ca924e4180cfad93f392e60ea08385631f5d84e6bf9c22ef3fa
-
SHA512
a73145a5ec220893bf5ab6be52e0a968df977fa6509c71318e61aca8028ca2dedd8cefc735016160616eb9a9a1b2b6445219df921acf26eaafde432188bb00ef
-
SSDEEP
3072:hBkbKCquXAhwpD4wb0dd04k7wrNIcJZoJyxoGeBuNUeCMu0y:hB9gqwpDH0dIwrNJ7oJ+o1Bufu0y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8fec8161a239ca924e4180cfad93f392e60ea08385631f5d84e6bf9c22ef3fa
Files
-
d8fec8161a239ca924e4180cfad93f392e60ea08385631f5d84e6bf9c22ef3fa.exe windows:4 windows x64
720550216c9994c199ee9c18e7b3a6c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
EscapeCommFunction
GetCommState
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
PurgeComm
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCommMask
SetCommState
SetCommTimeouts
SetUnhandledExceptionFilter
SetupComm
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WriteFile
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_close
_fmode
_getch
_initterm
_kbhit
_lseek
_onexit
_open
_read
_stricmp
_strnicmp
_time64
_write
abort
atoi
atol
calloc
exit
fflush
fprintf
free
fwrite
malloc
memcmp
memcpy
memset
printf
realloc
signal
sprintf
strcmp
strcpy
strlen
strncmp
strncpy
strtoul
vfprintf
vsprintf
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 1024B - Virtual size: 569B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ