Static task
static1
Behavioral task
behavioral1
Sample
8005e44761b842370d43299b29b0f16a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8005e44761b842370d43299b29b0f16a.exe
Resource
win10v2004-20231222-en
General
-
Target
8005e44761b842370d43299b29b0f16a
-
Size
24KB
-
MD5
8005e44761b842370d43299b29b0f16a
-
SHA1
5a740884a120d20f5506663428a4124e22fad5db
-
SHA256
23dc6589acc1c69a06d3caee292b472fdcf656af60169d63b8636d4bc8334ece
-
SHA512
1ebf30b006e6de755183e787502313c9a5718de7f740440cbd612893f623d07cbbbafe8fecc388a1676b895a923517c0d9f7f83e8649819dca94c69db7b9371e
-
SSDEEP
384:B0v6Fph8Wb+mC6VNwUKRoTN1DCodv5jPfhQ5nnD:B0iFP8WimHVNwCHDZN5jY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8005e44761b842370d43299b29b0f16a
Files
-
8005e44761b842370d43299b29b0f16a.exe windows:4 windows x86 arch:x86
b6a7a6e6e58faa24f11355a81ad61953
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
RemoveDirectoryA
CreateMailslotA
FindClose
HeapFree
GetVersion
CreateDirectoryA
GetDriveTypeW
RemoveDirectoryA
SetStdHandle
GetModuleHandleA
ExitThread
FindAtomA
WriteFile
SetEvent
GetCommandLineA
FindClose
GetSystemTime
SetVolumeLabelW
VirtualProtectEx
IsBadCodePtr
GetFileType
WriteConsoleA
ReleaseMutex
CreateEventA
uxtheme
GetThemeTextExtent
IsThemeActive
GetThemeSysSize
CloseThemeData
OpenThemeData
CloseThemeData
GetThemeColor
SetWindowTheme
GetWindowTheme
GetThemeRect
GetThemeTextMetrics
DrawThemeBackground
DrawThemeEdge
rasmxs
DeviceEnum
DeviceEnum
DeviceEnum
DeviceEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ