Static task
static1
Behavioral task
behavioral1
Sample
8700a45c7b0c6a8f93bdd9ce6e9e2760.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8700a45c7b0c6a8f93bdd9ce6e9e2760.exe
Resource
win10v2004-20231222-en
General
-
Target
8700a45c7b0c6a8f93bdd9ce6e9e2760
-
Size
1.1MB
-
MD5
8700a45c7b0c6a8f93bdd9ce6e9e2760
-
SHA1
f9dd9ef6f340749316aa3904e89fccbc38edd481
-
SHA256
76ff3cf030b763ebe10eb36e2e03206fbf4ab4fd0b50053e03aecec65c17f897
-
SHA512
6bc42359cf15d0e43bdb1504c73f971e412f4d868f9c545d6290f23e5ddb68d280dfd51ba12dfab27f896aa91e1dea8ab3b225c11b3c5531ad528af986827677
-
SSDEEP
12288:AUXm9k+HCbRCe2sqYlordoAgWPHYLs6eHT2OuRCl7A4EavGSEoEkxbo5LrsUqktp:AUXmBo/ugWvYDeHT/hA4VvhEFOYkIv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8700a45c7b0c6a8f93bdd9ce6e9e2760
Files
-
8700a45c7b0c6a8f93bdd9ce6e9e2760.exe windows:4 windows x86 arch:x86
a7bbbc378f55cacb51bd14de8bf21f2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleW
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetVersion
GetCommandLineA
GetUserDefaultLangID
GetCurrentProcess
GetTickCount
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThreadId
QueryPerformanceCounter
SetEvent
LoadResource
TerminateProcess
FormatMessageW
user32
ShowWindow
SetForegroundWindow
PeekMessageA
GetClientRect
EndDialog
GetSystemMenu
Sections
.text Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 814KB - Virtual size: 813KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ