Static task
static1
Behavioral task
behavioral1
Sample
8c282f25055a683887b5e8d4be3c3a65.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c282f25055a683887b5e8d4be3c3a65.exe
Resource
win10v2004-20231215-en
General
-
Target
8c282f25055a683887b5e8d4be3c3a65
-
Size
584KB
-
MD5
8c282f25055a683887b5e8d4be3c3a65
-
SHA1
d6ac6a5cbe3420d617654f099a99f1b6d23a94d9
-
SHA256
8eb3710c40736a26c8f85de90b1b99ad1351cbfe5b76e28c9cd7dc02b77655fc
-
SHA512
7abfe9b12d4f0123becbee8df78738c05ca1a80b08475df2f16776f14942cda69f42b739fb9b387ca92223576e68b7670189e70ca8470888d023a4af1a607e7d
-
SSDEEP
12288:BiASivy0pFHr3+dvHWCzvYe5iKF76A/67lbeaVsm9SxY2bYMwFhg2pd:wA1yuHgHWCa6qlyaV3UxY2sVfgu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c282f25055a683887b5e8d4be3c3a65
Files
-
8c282f25055a683887b5e8d4be3c3a65.exe windows:5 windows x86 arch:x86
a3063e31a6271379448f6a33ca3387aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
SetEndOfFile
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateFileW
GetTimeZoneInformation
ExpandEnvironmentStringsA
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
CreateFileMappingA
GetCurrentThreadId
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
CompareStringA
SetHandleCount
EnterCriticalSection
GetACP
InterlockedIncrement
GetVersion
GetLocaleInfoA
VirtualQuery
WriteConsoleA
TerminateProcess
MulDiv
SetUnhandledExceptionFilter
SetFileAttributesA
CreateThread
SetFilePointer
CreateMutexA
GetLocalTime
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
RaiseException
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InterlockedDecrement
SetLastError
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
SetEvent
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetStdHandle
RtlUnwind
GlobalLock
GetModuleHandleW
InterlockedExchange
SizeofResource
IsValidCodePage
UnmapViewOfFile
VirtualFree
Sleep
FindResourceA
VirtualAlloc
HeapFree
GetOEMCP
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
user32
SetForegroundWindow
CreateWindowExA
CheckMenuItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
SetFocus
ReleaseDC
FillRect
SetTimer
ScreenToClient
IsIconic
EnableWindow
ShowWindow
GetParent
GetMessageA
DestroyWindow
ClientToScreen
SendMessageA
GetDC
PeekMessageA
EndPaint
IsWindow
SetWindowPos
PostQuitMessage
LoadCursorA
MessageBoxA
GetSysColor
GetWindowLongA
EnableMenuItem
IsWindowVisible
InvalidateRect
DrawTextA
GetClientRect
CallWindowProcA
SetCursor
SystemParametersInfoA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
gdi32
DeleteObject
DeleteDC
BitBlt
SelectObject
advapi32
RegQueryValueExA
RegCreateKeyExA
OpenProcessToken
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 559KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ