Static task
static1
Behavioral task
behavioral1
Sample
08d55c0da1638e7ff7897a9a320033b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08d55c0da1638e7ff7897a9a320033b9.exe
Resource
win10v2004-20231215-en
General
-
Target
08d55c0da1638e7ff7897a9a320033b9
-
Size
423KB
-
MD5
08d55c0da1638e7ff7897a9a320033b9
-
SHA1
4f457ee93fae2b4d47d122387ee57d9aaf9a330d
-
SHA256
84dcd6ea1aa1a6b10232af7baf0e653734d8dcf381ad7f558279f5552eed5576
-
SHA512
37d433dad324bfbe56a5825d5c0fa021142333278e5b8d4979ae13918516b03e4354e840e0bf20044eafb78f6a05a160882f3ac6f5f2287d1ce0dca0b42f5330
-
SSDEEP
6144:N2vr9LrcPwlA/jfFPzZ0Ti5iEpggR8mKVN4gNIzXm61K/AU6WV:cBvc44bFPz6i5iEq75ymhIpWV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d55c0da1638e7ff7897a9a320033b9
Files
-
08d55c0da1638e7ff7897a9a320033b9.exe windows:4 windows x86 arch:x86
ce956aae085fb000517e36b93f18b469
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
GetEnvironmentStrings
SetConsoleCursorInfo
GetNumberFormatW
FreeLibrary
OpenMutexW
HeapAlloc
SetUnhandledExceptionFilter
IsValidLocale
HeapCreate
LeaveCriticalSection
VirtualFree
LocalAlloc
SetEnvironmentVariableA
UnhandledExceptionFilter
IsValidCodePage
TlsGetValue
GetCommandLineA
GetCurrentThread
ConvertDefaultLocale
InterlockedDecrement
GlobalDeleteAtom
GetDateFormatA
CompareStringA
GetFileType
GetLocaleInfoA
LCMapStringW
GetCPInfo
GetProcAddress
GetPrivateProfileSectionA
GetACP
SetHandleCount
SetConsoleWindowInfo
GetDiskFreeSpaceExW
SetLocaleInfoA
GetLocaleInfoW
VirtualQuery
GetUserDefaultLCID
SetConsoleCtrlHandler
HeapSize
GetPrivateProfileSectionNamesW
GetOEMCP
LCMapStringA
FreeEnvironmentStringsW
HeapReAlloc
GetTimeZoneInformation
ExitProcess
CreateDirectoryExA
WriteFile
VirtualAlloc
SetLastError
QueryPerformanceCounter
GetCurrentProcess
GetStringTypeA
GetModuleHandleA
EnterCriticalSection
GetStartupInfoA
GetStdHandle
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
TlsAlloc
lstrcmpi
EnumSystemLocalesA
GetCurrentProcessId
TlsSetValue
GetStringTypeW
GetThreadContext
GetCommandLineW
GetTickCount
GetLastError
lstrlenW
DeleteCriticalSection
InterlockedIncrement
HeapDestroy
RtlUnwind
CompareStringW
GetSystemTimeAsFileTime
InterlockedExchange
GetTimeFormatA
CreateMutexW
GlobalFindAtomW
FreeEnvironmentStringsA
TlsFree
GetEnvironmentStringsW
GetModuleHandleW
HeapFree
TerminateProcess
LoadLibraryA
GetFileSize
MultiByteToWideChar
WideCharToMultiByte
DebugActiveProcess
GetModuleFileNameA
IsDebuggerPresent
lstrcatA
Sleep
MapViewOfFile
comdlg32
LoadAlterBitmap
ChooseColorA
GetFileTitleA
FindTextA
PageSetupDlgW
GetSaveFileNameA
PageSetupDlgA
GetFileTitleW
ChooseColorW
GetOpenFileNameA
wininet
UnlockUrlCacheEntryFile
RunOnceUrlCache
InternetTimeFromSystemTimeA
CreateUrlCacheContainerW
InternetGetLastResponseInfoW
InternetSecurityProtocolToStringW
ShowCertificate
user32
CallWindowProcA
SetCursor
RegisterClipboardFormatA
GetInputDesktop
GetCursorInfo
UnregisterDeviceNotification
GetPriorityClipboardFormat
GetMenuState
WindowFromPoint
DrawFrameControl
GetPropA
SendIMEMessageExA
GetCapture
SetDebugErrorLevel
GetMenu
SetShellWindow
CloseDesktop
LoadMenuIndirectW
SetWindowLongA
DefWindowProcA
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ