Static task
static1
Behavioral task
behavioral1
Sample
8b2a4758420bda3379078fd403d2291d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b2a4758420bda3379078fd403d2291d.exe
Resource
win10v2004-20231222-en
General
-
Target
8b2a4758420bda3379078fd403d2291d
-
Size
82KB
-
MD5
8b2a4758420bda3379078fd403d2291d
-
SHA1
9a78237acd6524e2fe14dd9c05527a1e22cec058
-
SHA256
686e26a96bef6e3018be3682c5308d7b5a015cafc787c7594b2500a51c64394a
-
SHA512
eb9097fb62bee18b6b251fc68e59b0bee88628c82dedd9e91a9a58127d710cd5331b3bd93c66ffda20aa88fc374e32c50832a5381e200b6ad1423c1c400f9f09
-
SSDEEP
1536:JfB5Te5ovcmbiIJIYYeTkw2d1uihmGhxlL3NKg3R:JfB565ovcmOIJIY7TkwwZZKg3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b2a4758420bda3379078fd403d2291d
Files
-
8b2a4758420bda3379078fd403d2291d.exe windows:4 windows x86 arch:x86
4905c4b63ea43cba8875a98fd94a4156
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
lstrlenA
GetCurrentDirectoryA
CreateThread
GetModuleHandleA
GetStartupInfoA
WriteFile
CreateFileA
gdi32
CreateCompatibleBitmap
CreateFontIndirectA
GetObjectA
SetTextColor
CreateSolidBrush
BitBlt
CreateCompatibleDC
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
StretchBlt
CreateBitmap
mfc42
msvcrt
__CxxFrameHandler
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_ftol
strtok
__dllonexit
sprintf
_exit
_XcptFilter
_onexit
_acmdln
__getmainargs
exit
_initterm
_setmbcp
__setusermatherr
_controlfp
user32
GetDC
UpdateWindow
IsIconic
LoadIconA
GetSystemMetrics
DrawIcon
GrayStringA
wsprintfA
EnableWindow
SetRect
DrawTextA
TabbedTextOutA
FillRect
SendMessageA
GetClientRect
LoadBitmapA
GetSysColor
ReleaseDC
PostMessageA
GetWindowLongA
wininet
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
winmm
timeGetTime
Sections
.nsp0 Size: 120B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE