Static task
static1
Behavioral task
behavioral1
Sample
8d73591e76f5ac91d7db79a0bd7bbfbf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d73591e76f5ac91d7db79a0bd7bbfbf.exe
Resource
win10v2004-20231215-en
General
-
Target
8d73591e76f5ac91d7db79a0bd7bbfbf
-
Size
157KB
-
MD5
8d73591e76f5ac91d7db79a0bd7bbfbf
-
SHA1
a772b1687749fba0caf62ccd2b716a4ee6e94078
-
SHA256
e6f5ff2898b5a0c385e53aa0d10c27035c5f988976c8e966ed4205bec71b4813
-
SHA512
5f81f4bc5e1a7e69da69a792595dc32ac5578b845eb552a1c54b4dae737fd9e117b03f64eded43f9c53fc3e2e0e02e43f7e36b9d700e824a105e53ceb6357fff
-
SSDEEP
3072:6N+u1KFe2Fu0uvCrodJfecng9eviMK3S0Pl5Nq6JKczNhAU:Ml4kHAoXfeigcvzCS2l5NqCK+hAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d73591e76f5ac91d7db79a0bd7bbfbf
Files
-
8d73591e76f5ac91d7db79a0bd7bbfbf.exe windows:4 windows x86 arch:x86
ead318996d91f37d6dc58968346aeec3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
wsprintfW
KillTimer
SetTimer
SendMessageA
DispatchMessageW
CharUpperW
CharNextW
PostThreadMessageW
GetDC
GetMessageW
TranslateMessage
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoTaskMemAlloc
CoRevokeClassObject
CoUninitialize
CoRegisterClassObject
CoTaskMemFree
CoInitialize
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
StringFromCLSID
kernel32
WideCharToMultiByte
lstrcpyA
InitializeCriticalSection
OutputDebugStringW
GetProcessAffinityMask
LockResource
GetACP
lstrcpyA
GetLastError
lstrcmpiW
EnumResourceNamesW
lstrlenW
lstrcpyW
GetTickCount
MultiByteToWideChar
GlobalAlloc
GlobalFree
FreeEnvironmentStringsW
FindClose
GetCPInfo
GetModuleHandleW
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ