Static task
static1
Behavioral task
behavioral1
Sample
0c8527c2b9455346e99c512bbc457edfa2e16cfea22981e88c62484c1d764176.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0c8527c2b9455346e99c512bbc457edfa2e16cfea22981e88c62484c1d764176.exe
Resource
win10v2004-20231023-en
General
-
Target
0c8527c2b9455346e99c512bbc457edfa2e16cfea22981e88c62484c1d764176
-
Size
157KB
-
MD5
7f3c7e8333385cc976e9a1c497aba8cf
-
SHA1
8ee6a9a8eb455647e45f87fdd7b4e60929bc49c3
-
SHA256
0c8527c2b9455346e99c512bbc457edfa2e16cfea22981e88c62484c1d764176
-
SHA512
9f904da5a0a0ba05aa3f4550691d42e4839220fb500eb43c10ebb5c541da1be7d19e1bab7c7f52aff10573bdc280d40e77168b7b80be304a4ceabe7d6321d6c7
-
SSDEEP
768:H4BSo1d0MbfeH2po+LHAlGfD+Mc+YGGymIWFl9MQKcQ:HQ1dnCH2lLHRDxLAy1sKQKcQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c8527c2b9455346e99c512bbc457edfa2e16cfea22981e88c62484c1d764176
Files
-
0c8527c2b9455346e99c512bbc457edfa2e16cfea22981e88c62484c1d764176.exe windows:5 windows x86
0cd71b925f70f7c8b6c1e7c573170f5a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrencyFormatA
WaitForSingleObjectEx
ReplaceFileA
GetProfileStringA
SetCurrentDirectoryA
GetShortPathNameA
GetModuleHandleA
lstrcatA
GetBinaryTypeA
GlobalFindAtomW
lstrcpynA
FindAtomW
GetGeoInfoW
RemoveDirectoryW
GetStringTypeW
IsBadStringPtrW
GetVolumeInformationW
GetProcAddress
WaitForMultipleObjects
UnmapViewOfFile
CreateSemaphoreW
LoadLibraryExW
authz
AuthzFreeContext
AuthzFreeAuditEvent
shell32
ExtractIconA
ShellExecuteA
ShellMessageBoxA
DllRegisterServer
SHBrowseForFolderA
SHFileOperationW
SHChangeNotify
DragQueryFileW
SHGetFolderPathA
DragAcceptFiles
StrChrW
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ