Static task
static1
Behavioral task
behavioral1
Sample
8d3f923b3193f734b9511b1695126315.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d3f923b3193f734b9511b1695126315.exe
Resource
win10v2004-20231215-en
General
-
Target
8d3f923b3193f734b9511b1695126315
-
Size
2.5MB
-
MD5
8d3f923b3193f734b9511b1695126315
-
SHA1
c6dd997913e4ff57dde0aa7495981782ac892ead
-
SHA256
b0d0d4aedbc97f3f8ced1230522b65e4ce8f8876c47f9915464286f68dac23c8
-
SHA512
5ab65f08017fdf76e107b608976fdd5af6e2e71dc1b0e76ac2c88b9210e3d80732e83c7658aa467cb237e863dc3a432ab4072524d5bf6bf8c824613bec932218
-
SSDEEP
49152:RHJMrOO53RTqtiIDHXiHJMrOO53RTqtip8xmN3Aek03noj45wlDT:crOO53UrOO53JeUJF3noxD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d3f923b3193f734b9511b1695126315
Files
-
8d3f923b3193f734b9511b1695126315.exe windows:4 windows x86 arch:x86
93b3db8e844eee43bb2305ea1d8b9aea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForSingleObject
lstrcmpA
GetPrivateProfileStringA
SetEndOfFile
WriteFile
SetFilePointer
lstrlenA
SearchPathA
LoadLibraryA
CreateFileA
lstrcpyA
GetExitCodeProcess
OpenProcess
CreateProcessA
WritePrivateProfileStringA
LocalAlloc
LocalFree
GetCurrentThread
ExitProcess
SetThreadPriority
FreeLibrary
GetProcAddress
lstrcpynA
lstrcmpiA
GetModuleFileNameA
GetCommandLineA
GlobalFree
GetWindowsDirectoryA
GetStartupInfoA
ReadFile
GetFileSize
GlobalAlloc
user32
ShowWindow
CreateWindowExA
LoadStringA
MessageBoxA
FindWindowA
wsprintfA
SendMessageA
CharNextA
CharLowerA
shell32
ShellExecuteExA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegFlushKey
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE