Static task
static1
Behavioral task
behavioral1
Sample
8b0a287ec30be03b00b000cbda96f7698889beffac69437c24030f80c31dabb3.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8b0a287ec30be03b00b000cbda96f7698889beffac69437c24030f80c31dabb3.exe
Resource
win10v2004-20231023-en
General
-
Target
8b0a287ec30be03b00b000cbda96f7698889beffac69437c24030f80c31dabb3
-
Size
352KB
-
MD5
90ed7dd8fa29ec7843aac235806a22c1
-
SHA1
132f6b5985119d87a5ccdaf28925d7d7ce88fa4f
-
SHA256
8b0a287ec30be03b00b000cbda96f7698889beffac69437c24030f80c31dabb3
-
SHA512
e641a30c248159e348ae94f27d160370faf4188e97739cd1b1c65d07f2284279ef67aee0aa700f7c81e98572c536e8a64dc9c52c7487c924d38729529fb599e8
-
SSDEEP
6144:+pWMSmgY0IyFpXjsCEqhp3xuo8Pr7Jjc7wPxPC:vHP7LFVst+0oA71+gC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b0a287ec30be03b00b000cbda96f7698889beffac69437c24030f80c31dabb3
Files
-
8b0a287ec30be03b00b000cbda96f7698889beffac69437c24030f80c31dabb3.exe windows:5 windows x86
201865a4626bc8f27f802ffa674e6982
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
powrprof
IsPwrHibernateAllowed
ReadGlobalPwrPolicy
kernel32
LoadLibraryExW
LocalFree
GetCurrentConsoleFont
AddConsoleAliasA
HeapWalk
HeapCreate
EraseTape
EnumSystemLocalesA
GetModuleHandleW
GetProcessAffinityMask
SetFileAttributesW
DeleteVolumeMountPointW
LockFile
GetLocaleInfoW
FillConsoleOutputAttribute
GetConsoleCursorInfo
GlobalFindAtomA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalAddAtomW
FindFirstFileA
IsDBCSLeadByte
wininet
RetrieveUrlCacheEntryStreamW
msvcrt
memset
user32
GetWindowRect
InsertMenuA
GetClipboardFormatNameA
SetCursor
ShowCaret
IsWindow
ole32
CoFreeUnusedLibrariesEx
gdi32
GetDeviceCaps
GetObjectW
GetCharWidthW
GetPaletteEntries
GetBitmapBits
winspool.drv
FindNextPrinterChangeNotification
Sections
.rda Size: 304KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 20KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m5Fih Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdaW97 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdaW97M Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ