Static task
static1
Behavioral task
behavioral1
Sample
8d83e561dbf47e34f42ad419078e7def.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d83e561dbf47e34f42ad419078e7def.exe
Resource
win10v2004-20231222-en
General
-
Target
8d83e561dbf47e34f42ad419078e7def
-
Size
2.5MB
-
MD5
8d83e561dbf47e34f42ad419078e7def
-
SHA1
6a1fdb6bd45d0467d84617ff134263ba526b737f
-
SHA256
cb742a581003f99f0c25b0e6cefe9f64facd4579c1b4afbb9e8bec5edc46808a
-
SHA512
f9cc817240db0deab7ec3a0cfe0874a0dee974a8ef022d7192255f71299119e0a5d18ece081dee24c53f208e88ee71105ceeb4097f10c479b9e81b6b442ee888
-
SSDEEP
24576:1eTBmvmvWD0zt/ZKLpGOOiTgEjOm71bI0vyMPj2H0TQLq2Wsk9T:1nvGWUBZKLpFBim71cvML2oADo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d83e561dbf47e34f42ad419078e7def
Files
-
8d83e561dbf47e34f42ad419078e7def.exe windows:4 windows x86 arch:x86
3df1564c13b5f0aa5722aabdc858d3ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowsHookExW
UnregisterDeviceNotification
EnumDisplaySettingsW
GetScrollRange
MapDialogRect
SetProcessDefaultLayout
DeleteMenu
GetUpdateRgn
IsZoomed
ModifyMenuW
CreateIconIndirect
SetMenuDefaultItem
DrawCaption
LoadAcceleratorsA
GetSysColorBrush
GetWindow
ChangeClipboardChain
SetCaretPos
GrayStringA
BroadcastSystemMessageA
RegisterClipboardFormatA
GetKeyboardState
AdjustWindowRectEx
DispatchMessageA
GetCursor
oleaut32
SafeArrayGetElement
kernel32
CreateMutexA
ExitProcess
GetFileType
SetConsoleWindowInfo
SetEnvironmentVariableW
MultiByteToWideChar
GetConsoleMode
GetTimeZoneInformation
GetModuleHandleA
SwitchToFiber
WriteFile
SetErrorMode
GetModuleFileNameW
CreateEventA
SetConsoleCursorPosition
SetConsoleTitleA
PrepareTape
GetSystemInfo
GetThreadContext
SetVolumeLabelA
SetFileTime
shell32
SHFileOperationW
SHChangeNotify
Sections
.text Size: 692KB - Virtual size: 691KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 394KB - Virtual size: 393KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ