Static task
static1
Behavioral task
behavioral1
Sample
8f65f44ff95707a9022787640c17a90e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f65f44ff95707a9022787640c17a90e.exe
Resource
win10v2004-20231215-en
General
-
Target
8f65f44ff95707a9022787640c17a90e
-
Size
160KB
-
MD5
8f65f44ff95707a9022787640c17a90e
-
SHA1
e06f3134e196e31c788931d2d060f911ed248c41
-
SHA256
eaff902c1b9323e60973bded4bd4e729743492d9a3997e7bd1e01c5c1eeeff12
-
SHA512
62e0c4de31db9bca280f2f9ab05002757d4c10eee6a6ddb0157219994509575b919437ef52c360ec17e36d3f66f340a72898d153355078f44c20a218246f2d3f
-
SSDEEP
1536:XrbSrrF21pyVlqIZBTbV0+SmtaAEUydLOqMdhvGm+lQyk6p7bp7:Xrb4r4U9vV0XmkUydsd0lQQp3p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f65f44ff95707a9022787640c17a90e
Files
-
8f65f44ff95707a9022787640c17a90e.exe windows:4 windows x86 arch:x86
ac593b0a4b14761bc06f0b62d6b7aba8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
TerminateThread
VirtualAlloc
ResumeThread
LoadLibraryA
PulseEvent
GetProcAddress
DeleteFileW
CloseHandle
WriteFile
GetSystemInfo
VirtualProtect
GetLocaleInfoA
DeleteFileA
GetModuleHandleA
GetLastError
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
Sleep
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualQuery
user32
LoadBitmapA
LoadImageA
gdi32
CreateCompatibleBitmap
CreatePen
ole32
CoCreateInstance
oleaut32
VariantInit
winmm
midiDisconnect
avifil32
AVIMakeStreamFromClipboard
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ