Static task
static1
Behavioral task
behavioral1
Sample
08e3adc3971e2c4da166f33952b6598e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08e3adc3971e2c4da166f33952b6598e.exe
Resource
win10v2004-20231215-en
General
-
Target
08e3adc3971e2c4da166f33952b6598e
-
Size
117KB
-
MD5
08e3adc3971e2c4da166f33952b6598e
-
SHA1
f433f01f1b390d9f9c2a5676414ef7329ec8a8ee
-
SHA256
e302d788b40fb99d8ab2fc21e765586b38b792a4304a4b39c12b1303328dd580
-
SHA512
32a37745da32672978f4356b6cbcc8089b697a4197e001af2bee9ee7a39cc0c792c20da5deb7b34e6d303d33d647bcc5481926f9f8ff32d4251ede6e927427de
-
SSDEEP
3072:mOGV7XPcdgYq8yW4KN3VzO172U0A6xvDbb:M1Pcddq+4KV9O176vJz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08e3adc3971e2c4da166f33952b6598e
Files
-
08e3adc3971e2c4da166f33952b6598e.exe windows:1 windows x86 arch:x86
091f6c7c6bf5506030cf9d7e9c8d5eee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
TextOutA
winmm
waveOutGetPosition
Sections
CODE Size: 109KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE