Static task
static1
Behavioral task
behavioral1
Sample
088cfe8426e494879869fca26da4bd94.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
088cfe8426e494879869fca26da4bd94.exe
Resource
win10v2004-20231222-en
General
-
Target
088cfe8426e494879869fca26da4bd94
-
Size
523KB
-
MD5
088cfe8426e494879869fca26da4bd94
-
SHA1
12d4cf9c94f25d6de32fb80e50a647666ee979ab
-
SHA256
47ddf7e4ebc01d5e7eeb1d51fa87bc93fa5ddcd4392251e5198df7764e22e53c
-
SHA512
83eae68092f7baa4b841656ddf244f62768f4a645d5cb6f3b48f1996c370cee5076102ee649610bdbacd0fb86b5c1f68a19abeba32e96d3101cce95d27baf435
-
SSDEEP
12288:fElPQhDtwDhgXKK7HujoODo4UxAbKqmt/0Jy:fDhDmDh/KiTo4Ux30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 088cfe8426e494879869fca26da4bd94
Files
-
088cfe8426e494879869fca26da4bd94.exe windows:4 windows x86 arch:x86
775a3c615c10ee94c43e09828d4a2e9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetFlags
ImageList_Read
ImageList_EndDrag
CreateStatusWindowA
ImageList_GetIcon
DestroyPropertySheetPage
DrawStatusTextW
ImageList_Copy
ImageList_DrawEx
ImageList_Create
ImageList_Merge
InitCommonControlsEx
ImageList_BeginDrag
ImageList_Add
ImageList_LoadImage
CreatePropertySheetPageA
ImageList_LoadImageA
CreateToolbar
ImageList_AddIcon
ImageList_GetIconSize
ImageList_SetFilter
ImageList_DragEnter
ImageList_DragLeave
ImageList_SetDragCursorImage
ImageList_GetImageCount
advapi32
CryptGetProvParam
RegEnumKeyA
RegReplaceKeyW
kernel32
WritePrivateProfileStructW
LeaveCriticalSection
SetFilePointer
GetConsoleCP
FreeEnvironmentStringsA
GetCommandLineA
GetVersionExA
GetStartupInfoA
WritePrivateProfileStructA
IsValidLocale
Sleep
CompareStringA
ReadFile
SetLastError
HeapDestroy
HeapAlloc
GetStdHandle
LCMapStringW
GetStartupInfoW
FreeLibrary
GetEnvironmentStringsW
GetConsoleOutputCP
SetSystemTime
InterlockedIncrement
TlsFree
QueryPerformanceCounter
TlsGetValue
SetEndOfFile
FreeEnvironmentStringsW
GetTimeZoneInformation
GetModuleHandleA
OpenMutexA
FlushFileBuffers
SetComputerNameW
GetDateFormatA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
LCMapStringA
GetLocaleInfoW
WideCharToMultiByte
GetFileType
MultiByteToWideChar
GetTimeFormatA
TerminateProcess
GetProcAddress
GetProcessHeap
GetUserDefaultLCID
GetStringTypeA
InitializeCriticalSection
GetVersion
EnterCriticalSection
EnumCalendarInfoExA
GetCurrentThread
HeapCreate
IsDebuggerPresent
InterlockedExchange
GetCommandLineW
GetLocaleInfoA
LoadLibraryA
CreateMutexA
GetConsoleTitleW
WriteFile
GetCPInfo
SetEnvironmentVariableA
GetCurrentProcessId
GetCurrentProcess
GetTickCount
TlsAlloc
GetEnvironmentStrings
SetConsoleCtrlHandler
InterlockedExchangeAdd
DeleteCriticalSection
VirtualAlloc
GetModuleFileNameA
WriteConsoleA
HeapSize
InterlockedDecrement
GetModuleFileNameW
UnhandledExceptionFilter
GetStringTypeW
CreateRemoteThread
VirtualQuery
CloseHandle
TlsSetValue
HeapFree
SetHandleCount
GetACP
IsValidCodePage
EnumSystemLocalesA
EnumResourceNamesW
SleepEx
GetConsoleMode
ExitProcess
CompareFileTime
CompareStringW
WriteProfileStringA
GetLastError
VirtualFree
RtlUnwind
HeapReAlloc
GetOEMCP
WriteConsoleW
CreateFileA
GetCurrentThreadId
SetStdHandle
user32
VkKeyScanExA
ChildWindowFromPointEx
RegisterClassA
IsDialogMessage
LoadMenuA
DialogBoxIndirectParamA
MonitorFromPoint
SwitchDesktop
GetWindowTextA
PostThreadMessageW
RegisterClassExA
GetMessageExtraInfo
EnumPropsW
SetLastErrorEx
GetMenuStringA
InternalGetWindowText
GetQueueStatus
MapVirtualKeyExW
DdeQueryStringA
DlgDirListComboBoxA
CreateDialogParamA
ToAsciiEx
GetWindowWord
CreatePopupMenu
GetAsyncKeyState
FlashWindowEx
CallNextHookEx
Sections
.text Size: 309KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ