Static task
static1
Behavioral task
behavioral1
Sample
080a5f6f351ea72bc09efb784a9d5d3f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
080a5f6f351ea72bc09efb784a9d5d3f.exe
Resource
win10v2004-20231222-en
General
-
Target
080a5f6f351ea72bc09efb784a9d5d3f
-
Size
18KB
-
MD5
080a5f6f351ea72bc09efb784a9d5d3f
-
SHA1
6c8bb2bb4e52971933789a3464096fb7306ea58a
-
SHA256
e864e6d7bce1f465284d0d829564ef11862aba01f4f2751c35dc7629365fa445
-
SHA512
7345b717695d0dfc6f228191a095a2615c22513328a64f11bf95811ab64d19f630fba3449e7c4ee1e331b54d90294237ff8428e417050e1844cdb98213e39bfa
-
SSDEEP
192:FBo5zzdamOSljoU5DrLW7UE9rxTgAMPYKxAsEfS4jZMFK07lVJTa0qtHWx:3UomOEjRrLW7U4r1xSYaALolVla0zx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 080a5f6f351ea72bc09efb784a9d5d3f
Files
-
080a5f6f351ea72bc09efb784a9d5d3f.exe windows:4 windows x86 arch:x86
0ac04e358099e81e3aa001822464fa6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
GetModuleHandleA
VirtualProtect
GetACP
HeapQueryInformation
GetStdHandle
InterlockedExchange
GetEnvironmentStringsA
GetCurrentThread
LoadLibraryExA
GetProcessVersion
GetLogicalDrives
IsDebuggerPresent
GetProcessHeap
GlobalMemoryStatus
GetCurrentProcessId
WaitForSingleObject
HeapDestroy
CreateIoCompletionPort
HeapCreate
GetTapeStatus
user32
GetCursorPos
ReleaseDC
DragDetect
GetWindow
SetForegroundWindow
GetClassNameA
GetFocus
FillRect
GetDlgItem
GetParent
EndPaint
DrawTextA
GetWindowTextLengthA
GetTitleBarInfo
BeginPaint
SetActiveWindow
ShowWindow
FrameRect
wsprintfA
advapi32
RegFlushKey
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegEnumKeyA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ