Static task
static1
Behavioral task
behavioral1
Sample
008816a46305c458a5123cba7bba6355.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
008816a46305c458a5123cba7bba6355.exe
Resource
win10v2004-20231215-en
General
-
Target
008816a46305c458a5123cba7bba6355
-
Size
17KB
-
MD5
008816a46305c458a5123cba7bba6355
-
SHA1
7c73f3c1df1f1d5e2ae685384acf86cc089cf755
-
SHA256
8ae5d4e566f8eb4772ce4d39e3b102588eaf9b89e951dc2f3e0be094f3b1fcde
-
SHA512
b76a1ab77f5acb03310e36aed0dd32a1711a377d32273cbbdcbe35f00277d29548b63c68c3afaaf6b5807bc836f5bea0a6bbc9b2a43bb632b606e06b1332c6da
-
SSDEEP
384:+vMcEr3jLIdngFr1SRcRMmRFLfr3rS9v0McCogHy139wrQ:FhSngFhAcRMmRFe9gXx94
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008816a46305c458a5123cba7bba6355
Files
-
008816a46305c458a5123cba7bba6355.exe windows:4 windows x86 arch:x86
258bcdebe78b19a9615601ba5b6a56cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
CopyFileA
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
WaitForSingleObject
TerminateProcess
OpenProcess
GetCommandLineA
CreateThread
GetModuleFileNameA
GetWindowsDirectoryA
WinExec
LockResource
LoadResource
SizeofResource
FindResourceA
GetStartupInfoA
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GetSystemDirectoryA
user32
FindWindowExA
FindWindowA
SendMessageA
advapi32
RegOpenKeyExA
RegCloseKey
RegSetValueExA
winmm
mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
msvcrt
strlen
_controlfp
_except_handler3
__set_app_type
strcat
sprintf
strncpy
sscanf
strchr
strrchr
memset
fclose
fseek
fwrite
fopen
_stricmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ