Static task
static1
Behavioral task
behavioral1
Sample
8bb95b1fdd69ae540bb6bc454170606b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8bb95b1fdd69ae540bb6bc454170606b.exe
Resource
win10v2004-20231215-en
General
-
Target
8bb95b1fdd69ae540bb6bc454170606b
-
Size
318KB
-
MD5
8bb95b1fdd69ae540bb6bc454170606b
-
SHA1
6543a7075512d7f456361b9c5bf2c1ca82239fb4
-
SHA256
f41f6d6c00087c1f1f20461b9ddb3a1263e913048ce83ea70a3c44b45d0b6942
-
SHA512
87c2ea66228e0f67d04be9d3c81b6314c7b0f9edf23fc7091ffbe312178e57d43937fd7b036107146a573f6b4828283e72217fa583e9b79437a1dc7ffb16e19a
-
SSDEEP
6144:+0EurSwerlSOnfdNUgoj0mJfJN8gNc7Pw176r:+0nrSaGfwgKFJJcIB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bb95b1fdd69ae540bb6bc454170606b
Files
-
8bb95b1fdd69ae540bb6bc454170606b.exe windows:4 windows x86 arch:x86
1af79031cee88dd05f096d632a2ca3f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleA
GlobalLock
GetLastError
VirtualFree
DeleteTimerQueue
VirtualProtect
LocalFree
GlobalAlloc
GetProcAddress
ExitProcess
ReleaseMutex
OpenMutexA
ResumeThread
LocalLock
CreateThread
HeapFree
IsBadCodePtr
Sleep
HeapAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
user32
LoadBitmapA
DestroyWindow
gdi32
CreateBrushIndirect
shell32
SHGetFolderPathA
ole32
CoInitialize
CoCreateInstance
psapi
GetWsChanges
GetProcessMemoryInfo
msvfw32
ICClose
ICRemove
DrawDibProfileDisplay
gdiplus
GdiplusStartup
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ