Static task
static1
Behavioral task
behavioral1
Sample
8b231418cb76b1bfa57e5eb77e1ac95ded0bcc34b64d8f109e7773fbd274280a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
8b231418cb76b1bfa57e5eb77e1ac95ded0bcc34b64d8f109e7773fbd274280a.exe
Resource
win10v2004-20231023-en
General
-
Target
8b231418cb76b1bfa57e5eb77e1ac95ded0bcc34b64d8f109e7773fbd274280a
-
Size
9.7MB
-
MD5
c7d703c7d04e8da481d8016ca74416c7
-
SHA1
87e4916e2aa406797ac035f5e1d2c8e43c7aec54
-
SHA256
8b231418cb76b1bfa57e5eb77e1ac95ded0bcc34b64d8f109e7773fbd274280a
-
SHA512
eb368ed825a6fd6cba241639b89f5a4fe7d519e3ff9eaa17eae8f8b8d9fd8bf5c689f8f3fbfbecaa6d7eab1af5eb2fa0c603c1754fb57ca30d9131cc00c2aa04
-
SSDEEP
196608:E+rgzX3zq3xHHVzp0Y/aMlZcgIAODHJF859yE47axZ6Ahsb68ITR654aSiBebTBj:E53z2HVFd/aMggIAMpF6sL4ZjCtITRN/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b231418cb76b1bfa57e5eb77e1ac95ded0bcc34b64d8f109e7773fbd274280a
Files
-
8b231418cb76b1bfa57e5eb77e1ac95ded0bcc34b64d8f109e7773fbd274280a.exe windows:5 windows x86 arch:x86
d39001d2813b450e2ffb72ddcd966c2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CharUpperA
gdi32
CreateCompatibleBitmap
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
uxtheme
GetWindowTheme
ole32
OleGetClipboard
oleaut32
LoadRegTypeLi
oledlg
ord8
winmm
PlaySoundA
gdiplus
GdipSetInterpolationMode
oleacc
AccessibleObjectFromWindow
imm32
ImmGetContext
Sections
.text Size: 9.5MB - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE