Static task
static1
Behavioral task
behavioral1
Sample
8d8a5590a95886e2bddeb320b7957630.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d8a5590a95886e2bddeb320b7957630.exe
Resource
win10v2004-20231215-en
General
-
Target
8d8a5590a95886e2bddeb320b7957630
-
Size
337KB
-
MD5
8d8a5590a95886e2bddeb320b7957630
-
SHA1
333282712ae17056d30dd60b61988fafdb494baa
-
SHA256
ee48931780e3c1768ec0d3e90fdd78cae6774db072caf6b7acbd73d28f7d3c92
-
SHA512
ed64b6a246b7474ddc489d7ca279171066bc0c1737c21ee710e216e175e8051dbeb31d0d576a749f6c6cc52e87501b16003d8fb0d44fab56bceb38aa149a1bbf
-
SSDEEP
6144:YCW+n/Y2IsqItEqy6a45mFDlV7Ftt8ZdWRO4o:bW+n/XXEkaHFZVbtKa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d8a5590a95886e2bddeb320b7957630
Files
-
8d8a5590a95886e2bddeb320b7957630.exe windows:4 windows x86 arch:x86
f16c101ac4bbb94c96d4d08394c99e34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcW
SetDlgItemTextA
RegisterClassA
ShowWindow
RegisterClassExA
CreateWindowExW
MessageBoxW
DestroyWindow
OpenDesktopA
comctl32
CreateStatusWindowW
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_Read
ImageList_ReplaceIcon
ImageList_GetFlags
ImageList_BeginDrag
ImageList_SetOverlayImage
ImageList_Destroy
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Create
CreateToolbarEx
ImageList_EndDrag
ImageList_Remove
CreateUpDownControl
ImageList_DragEnter
ImageList_SetFilter
CreatePropertySheetPageW
ImageList_Replace
DrawStatusText
DestroyPropertySheetPage
_TrackMouseEvent
kernel32
CreateFileA
GetLastError
WideCharToMultiByte
GlobalFlags
TerminateProcess
TlsGetValue
ReadConsoleA
SetUnhandledExceptionFilter
LCMapStringW
GetModuleFileNameA
HeapDestroy
GetLogicalDrives
WriteConsoleW
CompareStringA
lstrlen
GetCurrentProcessId
GetFileType
LCMapStringA
GetProfileSectionA
GetOEMCP
TlsFree
GetStringTypeW
InterlockedExchange
SetStdHandle
ExitProcess
InterlockedDecrement
QueryPerformanceCounter
AddAtomW
FindResourceExA
GetCurrentProcess
lstrcpy
GetProfileIntA
SetFilePointer
FindNextFileW
GetModuleHandleA
LocalAlloc
GetTimeZoneInformation
HeapFree
GetCurrentThread
MultiByteToWideChar
VirtualFree
IsValidCodePage
TlsSetValue
HeapCreate
RtlUnwind
GetConsoleCP
FreeLibrary
GetVersionExA
RtlFillMemory
VirtualAlloc
GetCPInfo
GetStartupInfoA
LoadLibraryA
GetEnvironmentStringsW
GetConsoleOutputCP
SetConsoleCtrlHandler
GetCurrentThreadId
OpenMutexW
GetTimeFormatA
FreeEnvironmentStringsA
WriteConsoleA
VirtualQuery
HeapReAlloc
UnhandledExceptionFilter
GetCompressedFileSizeW
CloseHandle
GetLocaleInfoA
GetEnvironmentStrings
FlushFileBuffers
EnumSystemLocalesA
CreateMutexA
SetPriorityClass
GetProcAddress
SetHandleCount
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeA
GetACP
SetEnvironmentVariableA
GetLocaleInfoW
GetSystemTimeAsFileTime
TlsAlloc
GetCommandLineA
RtlZeroMemory
VirtualUnlock
FreeEnvironmentStringsW
GetUserDefaultLCID
CompareStringW
GetProcessHeap
IsValidLocale
InterlockedIncrement
SetLastError
GetDateFormatA
HeapSize
EnterCriticalSection
GetConsoleMode
GetTickCount
Sleep
HeapAlloc
InitializeCriticalSection
IsDebuggerPresent
OpenMutexA
GetStdHandle
ReadFile
WriteFile
CreateEventW
advapi32
RegNotifyChangeKeyValue
RegEnumKeyExW
RegFlushKey
RevertToSelf
RegOpenKeyExW
RegDeleteValueW
CryptVerifySignatureW
RegQueryInfoKeyW
CryptSetProviderW
RegSetValueExW
CryptImportKey
RegOpenKeyW
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ