Static task
static1
Behavioral task
behavioral1
Sample
8d9e8a0e6bfcdaf9b12ebb1d3d971541.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8d9e8a0e6bfcdaf9b12ebb1d3d971541.exe
Resource
win10v2004-20231215-en
General
-
Target
8d9e8a0e6bfcdaf9b12ebb1d3d971541
-
Size
87KB
-
MD5
8d9e8a0e6bfcdaf9b12ebb1d3d971541
-
SHA1
dd479f27a4cd4255f1b753e90bfe111a9686082f
-
SHA256
c6460e0d51e75572074f15c7e1c457a77f631135020b7c01ba2af755145df7e6
-
SHA512
50488542ee61274fe1d730f7948ffe58d3863ae03d0f90f80032cc6c8c88791a43de10ea9eaf45122d41fb8c736aaa35d2623ec3c00fe2490e9ba93854e78a4b
-
SSDEEP
1536:DtMJCHO0X7s9YKZKPKlZUZrFgQma6hEoPQSx8CsdLwO4CHbnlNu3p8:DP9XmYClU9FgQma9o9x8CslwO46Gp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d9e8a0e6bfcdaf9b12ebb1d3d971541
Files
-
8d9e8a0e6bfcdaf9b12ebb1d3d971541.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.packed Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nc3l8rid Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cx8cvchx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pac0v9fb Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kym96.up Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ