Static task
static1
Behavioral task
behavioral1
Sample
0e8c893fd108846651c4711fd475cb4a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e8c893fd108846651c4711fd475cb4a.exe
Resource
win10v2004-20231215-en
General
-
Target
0e8c893fd108846651c4711fd475cb4a
-
Size
166KB
-
MD5
0e8c893fd108846651c4711fd475cb4a
-
SHA1
57fc8de49cecabb22b4ffa2d5931351bce0012d1
-
SHA256
e2d2c4ff876c03180936cd597d2598cf0ec58b35fd002388091476b6b72fb0e1
-
SHA512
3813022713ca6dba38a166cf76a7a45c9dff76bf440fd22b7a7f849956f0e4427d7277c27a98c03a18dbed11c718d763221244099508531397aac8e16145e328
-
SSDEEP
3072:zsAIseZ4itRnChnVtN2+9ZpokewXPUxaFRH+voU2ds4xYU0Bf:zshoThnVt4EPok/PUkFV+vKdsUUf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8c893fd108846651c4711fd475cb4a
Files
-
0e8c893fd108846651c4711fd475cb4a.exe windows:5 windows x86 arch:x86
c7bab4828d3f8bcc4859983e3f3fb540
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateHatchBrush
BeginPath
CreateDiscardableBitmap
EnumFontFamiliesExW
Polygon
SetBrushOrgEx
CreateDIBSection
kernel32
GetWindowsDirectoryW
GetStartupInfoA
GlobalGetAtomNameA
GetShortPathNameW
LocalFileTimeToFileTime
SetUnhandledExceptionFilter
SetThreadPriority
WriteFile
DisconnectNamedPipe
DefineDosDeviceW
GlobalMemoryStatusEx
HeapValidate
user32
AppendMenuW
SetLastErrorEx
DefFrameProcW
DefDlgProcW
SetSysColorsTemp
RedrawWindow
DrawIconEx
SetRect
SetMenuItemBitmaps
SetClassLongW
LoadIconW
GetMenu
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.glb Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OPTIONS Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdat Size: 5KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pack0 Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ