Static task
static1
Behavioral task
behavioral1
Sample
08396dc209a8d17202270609c2d81fdb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08396dc209a8d17202270609c2d81fdb.exe
Resource
win10v2004-20231215-en
General
-
Target
08396dc209a8d17202270609c2d81fdb
-
Size
452KB
-
MD5
08396dc209a8d17202270609c2d81fdb
-
SHA1
04114234b19f77ef110328ae64e59e58055bee37
-
SHA256
41ff78632e81dac307fcae5ff3fce178a34bfdcc206b6170677727dd8fc6c0b0
-
SHA512
2ab80007b6c4bab4b00aeb3a8c794413d3b005ca9a398c3ef21c08cf510e330e6da2486d681946587127dcedaad49bb8e264f140fbee65c772b0672ffc177ec1
-
SSDEEP
12288:RsZD4b55K7gvvr4sE7l3XWEZLorcjks/3fl5JF67cOn7qp:X5w3zZ8rcksPf67cuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08396dc209a8d17202270609c2d81fdb
Files
-
08396dc209a8d17202270609c2d81fdb.exe windows:5 windows x86 arch:x86
7855f0dd006c2625df3c05d4cf0bad2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetDriveTypeA
LocalSize
CloseHandle
HeapFree
HeapCreate
GetFileAttributesA
GetFileType
WaitForSingleObject
ReadFile
MapViewOfFile
SetFileAttributesW
IsBadReadPtr
SetLastError
GlobalLock
GetCommandLineW
GetFileTime
GetModuleHandleA
EnterCriticalSection
GetCommandLineA
Sleep
GetCurrentDirectoryW
GetEnvironmentVariableW
ExitProcess
SuspendThread
uxtheme
CloseThemeData
GetThemeTextExtent
DrawThemeBackground
GetThemeColor
GetWindowTheme
GetThemeBool
DrawThemeEdge
SetWindowTheme
CloseThemeData
OpenThemeData
GetThemeTextMetrics
GetThemeEnumValue
IsThemeActive
deskmon
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 445KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE