Static task
static1
Behavioral task
behavioral1
Sample
08d168c87972fece61abe918805bfee7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08d168c87972fece61abe918805bfee7.exe
Resource
win10v2004-20231215-en
General
-
Target
08d168c87972fece61abe918805bfee7
-
Size
179KB
-
MD5
08d168c87972fece61abe918805bfee7
-
SHA1
18e0e5dd52455cdd65e5143a8265a1e504ece80f
-
SHA256
e8dd65f58a29fe41faa560a861c417b5cccaa0db42b8d225ccc30a9eb3b43597
-
SHA512
02f0ca9d76864c2c81b5176db64f7a2ca662e6cddfcdd891d73a347485f5f7c48c72647c15231f4e8b530a051edf150da17336c4335c2489c96dfc8355f2b7bb
-
SSDEEP
3072:plefQsf2Mt3JJiGCZoohgT5XgPI6x+f8FWKKLpSZx7z59MxO:plFc2MtTCZoo24Vx+f8cK+e72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d168c87972fece61abe918805bfee7
Files
-
08d168c87972fece61abe918805bfee7.exe windows:5 windows x86 arch:x86
8b1818aac1b0282bf0bd8757c7cf4585
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
CreateThread
GetCurrentProcess
Process32First
OpenProcess
TerminateProcess
Module32First
GetProcAddress
Process32Next
WriteFile
CreateToolhelp32Snapshot
GetCurrentProcessId
GetLastError
FlushFileBuffers
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
CreateFileA
CloseHandle
GetVersionExA
OutputDebugStringA
GetModuleFileNameA
OpenEventA
CopyFileA
CreateProcessA
SetEvent
lstrlenA
DeleteFileA
Sleep
GetTickCount
MoveFileExA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleA
InterlockedIncrement
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
HeapSize
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCPInfo
VirtualQuery
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
GetStdHandle
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
user32
PostMessageA
FindWindowA
wsprintfA
advapi32
OpenSCManagerA
QueryServiceStatusEx
StartServiceA
CloseServiceHandle
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CreateProcessAsUserA
StartServiceCtrlDispatcherA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetUserNameA
ControlService
wininet
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetConnectA
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ