Static task
static1
Behavioral task
behavioral1
Sample
88bae218bd09a88ebd85316f5f241563d4473a9f567d261139d30d4c0fba53d2.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
88bae218bd09a88ebd85316f5f241563d4473a9f567d261139d30d4c0fba53d2.exe
Resource
win10v2004-20231025-en
General
-
Target
88bae218bd09a88ebd85316f5f241563d4473a9f567d261139d30d4c0fba53d2
-
Size
452KB
-
MD5
7ddf312cfd15071f183175b8e7980cf1
-
SHA1
7bbb9b8d61567e3f1d6e89e8a4b903124420dde5
-
SHA256
88bae218bd09a88ebd85316f5f241563d4473a9f567d261139d30d4c0fba53d2
-
SHA512
006213099d79f207ccae13eebfac0577636e9428c5da35c1d0603bb9c2fbad5dc72fc10588ee1e4da892a1d868a5165630c388de23a6db5ee5f45983dba4b7f8
-
SSDEEP
6144:1YwzzOm+P0FhNbzRXbkZ+/NaqaqpblD3wTW7Xe4Ohp6u9urP7omhoYkWnCf:GKFhNN6+/qqpbh3wTWr8hUkQsWnI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88bae218bd09a88ebd85316f5f241563d4473a9f567d261139d30d4c0fba53d2
Files
-
88bae218bd09a88ebd85316f5f241563d4473a9f567d261139d30d4c0fba53d2.exe windows:4 windows x86 arch:x86
50c78a909e053a2684449775f7939b81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
LocalSize
MultiByteToWideChar
GetACP
CloseHandle
CreateThread
DeleteCriticalSection
GetStartupInfoA
GetModuleHandleA
TerminateThread
WaitForSingleObject
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntryA
ole32
CoTaskMemAlloc
mfc42
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord2554
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord2621
ord1134
ord4486
ord6375
ord4274
ord1168
ord4673
ord1576
ord5714
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_XcptFilter
_exit
_onexit
_except_handler3
free
_setmbcp
__dllonexit
wmvert
wm_GetTickCount
wm_Sleep
wm_Kill
wm_GotoInternet
wm_Run
wm_Destroy
wm_Split
wm_InStr
wm_RpSubText
wm_MsgBox
wm_GetCmdLine
wm_UpdateWindow
wm_ToInt
wm_GetTempFileName
wm_ReadFile
wm_GetBinData
wm_pstr
wm_PostMessage
wm_InStrRev
wm_Len
wm_Right
wm_pbin
wm_BOr
wm_NotifySys
wm_CreateWindowFromTemplate
wm_GetRunPath
wm_Left
wm_Str
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ