Static task
static1
Behavioral task
behavioral1
Sample
08d13c56630eb44af255df648d5050fa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08d13c56630eb44af255df648d5050fa.exe
Resource
win10v2004-20231215-en
General
-
Target
08d13c56630eb44af255df648d5050fa
-
Size
495KB
-
MD5
08d13c56630eb44af255df648d5050fa
-
SHA1
bf2d1a2ec056efba17549a3c32757f09a285202c
-
SHA256
bcf43af85d605f5811af9a7f2e32a56c7018a52be96cc3e620f163f72fad9483
-
SHA512
be0b4875da977ef14547e8c0c0d4d3ac672ae6b71bb32927f201d4194bea60080bad81eee99fcec03a75292b283a936e1d3642d554cf1d0de9367f2d904b2398
-
SSDEEP
12288:Qkv/g3C3ROCX1wJ9BMFQZJYCdLySBPTTeeMryRXw:fg3oF5rCdLPTTeJWRX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d13c56630eb44af255df648d5050fa
Files
-
08d13c56630eb44af255df648d5050fa.exe windows:4 windows x86 arch:x86
cc5a1e1fcaae0580e6a4c7acb0c12860
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
TerminateProcess
GetConsoleOutputCP
HeapSize
DeleteCriticalSection
RtlUnwind
GetModuleFileNameW
UnmapViewOfFile
HeapAlloc
ConvertDefaultLocale
HeapDestroy
EnumSystemLocalesA
GetSystemTimeAdjustment
InterlockedExchange
FreeEnvironmentStringsW
LCMapStringA
VirtualQuery
Sleep
GetTickCount
CompareStringW
SetLastError
IsDebuggerPresent
ExitProcess
CreateDirectoryExW
ExpandEnvironmentStringsW
GetCurrentProcessId
GetStringTypeW
WriteFile
lstrcatA
SetHandleCount
GetLastError
IsBadReadPtr
OutputDebugStringW
TlsGetValue
LoadLibraryA
HeapReAlloc
FreeLibrary
GetCommandLineA
CompareStringA
GetCurrentThread
SetUnhandledExceptionFilter
LocalAlloc
IsValidCodePage
GetConsoleCP
GetModuleFileNameA
TlsFree
GetCurrentProcess
GetProcAddress
GetUserDefaultLCID
CreateFileA
InterlockedIncrement
SetEnvironmentVariableA
GetFileType
GetLocaleInfoA
lstrcmpW
DebugBreak
GetCurrentThreadId
LoadLibraryW
WaitForSingleObject
LCMapStringW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetDateFormatA
TlsSetValue
GetConsoleMode
GetACP
WriteConsoleA
FreeEnvironmentStringsA
TlsAlloc
EnumSystemCodePagesA
OpenMutexA
InterlockedDecrement
HeapValidate
GetStdHandle
WriteConsoleW
GetEnvironmentStrings
LeaveCriticalSection
GetPrivateProfileStructA
IsValidLocale
SetStdHandle
WideCharToMultiByte
GetModuleHandleA
LocalLock
MultiByteToWideChar
GetStartupInfoA
OutputDebugStringA
GetLocaleInfoW
HeapFree
GetCPInfo
GetTimeFormatA
GetTimeZoneInformation
GetProcessHeap
GetNumberFormatA
GetOEMCP
GetTempFileNameW
SetConsoleCtrlHandler
FlushFileBuffers
RaiseException
GetSystemTimeAsFileTime
GetStringTypeA
VirtualFree
CreateEventA
HeapCreate
UnhandledExceptionFilter
lstrlenA
GetEnvironmentStringsW
CreateMutexA
SetFilePointer
GlobalHandle
CloseHandle
SetCriticalSectionSpinCount
VirtualAlloc
CreateSemaphoreW
ReadFile
EnterCriticalSection
comctl32
InitCommonControlsEx
user32
SetCursorPos
CreateMDIWindowW
GetTopWindow
RegisterClassExA
RegisterClassA
GetClassNameW
AttachThreadInput
TileChildWindows
RegisterClipboardFormatA
DestroyIcon
CheckMenuRadioItem
FindWindowExW
MsgWaitForMultipleObjectsEx
GetSysColor
Sections
.text Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ