Static task
static1
Behavioral task
behavioral1
Sample
0a8df5a1f510e19bd0a3c966e094587d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a8df5a1f510e19bd0a3c966e094587d.exe
Resource
win10v2004-20231215-en
General
-
Target
0a8df5a1f510e19bd0a3c966e094587d
-
Size
454KB
-
MD5
0a8df5a1f510e19bd0a3c966e094587d
-
SHA1
1192a080e4bc8a88aa1765f5f8542decee8ddf13
-
SHA256
c1b6ae1a78017b1445eacc182e5598f37452d1420862bd6fac8b72838b139c11
-
SHA512
bbd1aadee4defecd57b01fb1f26d980f7cfb6a641bd01c7f44f88e078385d5791c0089ea063df49dabd73c82df2dbe755fc0b8702360640fde6212ad0edd7d1b
-
SSDEEP
12288:+NsFmC/wiBNld/1kl2u2ZR4sW8FxBxLf:+O1rk+Tp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a8df5a1f510e19bd0a3c966e094587d
Files
-
0a8df5a1f510e19bd0a3c966e094587d.exe windows:4 windows x86 arch:x86
1a7f817f74bbee5b08841a5d60be399f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoW
GetTimeFormatA
GetUserDefaultLCID
LCMapStringW
GetProcAddress
GetVersionExA
HeapReAlloc
MultiByteToWideChar
RemoveDirectoryA
GetLastError
GetCurrentProcessId
SetEnvironmentVariableA
WriteConsoleW
FreeLibrary
SetHandleCount
TlsFree
HeapCreate
WritePrivateProfileSectionA
SetLastError
TlsGetValue
GetCommandLineA
Sleep
LoadResource
GetStartupInfoA
HeapSize
GetPriorityClass
GetEnvironmentStringsW
GetNamedPipeInfo
FreeEnvironmentStringsA
ExitProcess
GetTickCount
LocalUnlock
SetConsoleCtrlHandler
HeapFree
DeleteCriticalSection
GetModuleFileNameA
GetOEMCP
LoadLibraryA
QueryPerformanceCounter
CompareStringW
VirtualAlloc
SetThreadContext
MoveFileW
TlsAlloc
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
VirtualFree
EnterCriticalSection
GetACP
GetDateFormatA
IsValidCodePage
SetUnhandledExceptionFilter
GetTimeZoneInformation
LocalReAlloc
GetSystemTimeAsFileTime
EnumSystemLocalesA
CreateSemaphoreW
WideCharToMultiByte
FreeEnvironmentStringsW
GetCPInfo
SetConsoleTitleA
LCMapStringA
InitializeCriticalSection
UnhandledExceptionFilter
GetNumberFormatW
GetCurrentThread
IsValidLocale
WriteFile
GetStringTypeW
LeaveCriticalSection
GetEnvironmentStrings
SetVolumeLabelW
InterlockedExchange
GetLocaleInfoA
TlsSetValue
CompareStringA
InterlockedDecrement
LockResource
ContinueDebugEvent
HeapDestroy
GetStringTypeA
HeapAlloc
IsDebuggerPresent
DeleteFileA
OpenMutexA
GetStdHandle
VirtualQuery
GetModuleHandleA
InterlockedIncrement
GetFileType
GetProcessHeap
RtlUnwind
lstrcmpi
advapi32
RegEnumKeyExW
CryptSetProvParam
CryptGetProvParam
LogonUserW
CryptCreateHash
LookupAccountNameW
CreateServiceW
GetUserNameA
LookupAccountSidA
CryptDuplicateHash
RegDeleteValueW
RegFlushKey
CryptSetProviderW
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ