Static task
static1
Behavioral task
behavioral1
Sample
88beecdced1111a035a256d45dfc50c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
88beecdced1111a035a256d45dfc50c3.exe
Resource
win10v2004-20231215-en
General
-
Target
88beecdced1111a035a256d45dfc50c3
-
Size
543KB
-
MD5
88beecdced1111a035a256d45dfc50c3
-
SHA1
5f57778380203ceab95c27b5340827157444663f
-
SHA256
9fc1642402d4e88b14b8d16f577152fc30623fbd4fe6a89acde421f28e270c8d
-
SHA512
c2463a59a27496df1296276e954c6f18ac87d5edb76dd00bcd4b3f6b729096b35d9bdcf78679eaad11a2bc4dae5c40a96acf6a01bf7fbd1cb5434e3820679ae8
-
SSDEEP
12288:9ANBpwc0fSaLWo7tIKIVT6WN1sByF8waHqv:9ANBpFit9tIKIVeu1d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88beecdced1111a035a256d45dfc50c3
Files
-
88beecdced1111a035a256d45dfc50c3.exe windows:5 windows x86 arch:x86
7392551ce9b57cd4e8238e9cb3b38f76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
Imports
mapi32
BMAPIAddress
BMAPIAddress
BMAPIDetails
BMAPIFindNext
BMAPIGetAddress
BMAPIGetReadMail
BMAPIReadMail
BMAPIResolveName
BMAPISaveMail
BMAPISendMail
BuildDisplayTable@40
CbOfEncoded@4
CchOfEncoding@4
ChangeIdleRoutine@28
CloseIMsgSession@4
CreateIProp@24
CreateTable@36
DeinitMapiUtil@0
DeregisterIdleRoutine@4
DllCanUnloadNow
DllGetClassObject
EnableIdleRoutine@8
EncodeID@12
FBadColumnSet@4
FBadEntryList@4
FBadProp@4
FBadPropTag@4
imm32
ImmGetContext
ImmLockClientImc
ImmIsIME
ImmInstallIMEW
ImmLockIMC
ImmLockIMCC
ImmLockImeDpi
ImmNotifyIME
ImmDestroySoftKeyboard
ImmRegisterWordA
ImmRegisterWordW
ImmEnumInputContext
ImmEnumRegisterWordA
ImmEnumRegisterWordW
ImmCreateIMCC
ImmActivateLayout
ImmDisableIME
ImmGenerateMessage
ImmGetAppCompatFlags
ImmGetCandidateListA
ImmGetCandidateListCountA
ImmGetCandidateListCountW
ImmGetCandidateListW
ImmGetCandidateWindow
ImmGetCompositionFontA
ImmGetCompositionFontW
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetCompositionWindow
ImmGetContext
ImmGetConversionListA
kernel32
GetLastError
CreateFileA
GetEnvironmentVariableA
GetACP
OutputDebugStringW
AttachConsole
IsBadCodePtr
HeapSetInformation
CreateRemoteThread
QueryDosDeviceA
LZRead
gdi32
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
CloseFigure
Sections
.text Size: 31KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 330KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 488KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ