Static task
static1
Behavioral task
behavioral1
Sample
8b3a9d6d068cb5115f937c4b79d045b2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b3a9d6d068cb5115f937c4b79d045b2.exe
Resource
win10v2004-20231215-en
General
-
Target
8b3a9d6d068cb5115f937c4b79d045b2
-
Size
152KB
-
MD5
8b3a9d6d068cb5115f937c4b79d045b2
-
SHA1
3a711a5f1d9aa2e4a30709ecfc570b378f037169
-
SHA256
0572c7b9402d8ae38534be5d6300b897860dc2df5570bec71c21e7b2a600de9e
-
SHA512
441316752fe13baf39a5f68f4018e64defae22d0b3b9e823520d750b1da678a7397cd10b08d496fcffd02b47875fe9f93a9c31496ebd9dd846c60cdeb6ee2e83
-
SSDEEP
1536:X4oUEOvocp/+CJm0jof4zZA0jKsFG0KNpy9Dme3ew7Z58Ems1OEHTJKqO:IdvoS9m0jof4ICGdNEi1w7J/xTJK5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b3a9d6d068cb5115f937c4b79d045b2
Files
-
8b3a9d6d068cb5115f937c4b79d045b2.exe windows:4 windows x86 arch:x86
43e1a9a9ec7cd77cd5be9504f2f66aaf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
ReadFile
GetFileSize
WritePrivateProfileStringA
GetEnvironmentVariableA
GetStringTypeA
WriteFile
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
CloseHandle
LCMapStringW
lstrlenA
GetStringTypeW
GetStdHandle
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
user32
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
PeekMessageA
MessageBoxA
DispatchMessageA
DestroyWindow
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
GetWindowTextA
gdi32
TextOutA
SetBkMode
comdlg32
GetOpenFileNameA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ