Static task
static1
Behavioral task
behavioral1
Sample
8c188a3a4579ca67c01f4cfbe1b6e34d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c188a3a4579ca67c01f4cfbe1b6e34d.exe
Resource
win10v2004-20231222-en
General
-
Target
8c188a3a4579ca67c01f4cfbe1b6e34d
-
Size
3.4MB
-
MD5
8c188a3a4579ca67c01f4cfbe1b6e34d
-
SHA1
0f474a3320f36570410374dc964cebb0edf8cba3
-
SHA256
264aa2a35d19f024c5ecb29fae4301a7f9ae9114212f7241f9455a95bf4647c4
-
SHA512
e38656b0e68f17b5c50d7c1f3d4a33b0e14f3f789e81f288d955cf5109aa2ae79d56125c9c1cf94777e0ccd319e2c21ce8d3fa48b6c9c8e5fbed7dc110616858
-
SSDEEP
98304:izZaSgpq7IzzF2uCvrkI62ckEfNxt+EI:izyq7IgZkl23EfcEI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c188a3a4579ca67c01f4cfbe1b6e34d
Files
-
8c188a3a4579ca67c01f4cfbe1b6e34d.exe windows:4 windows x86 arch:x86
a4b409597857b176a2c72fa8ca276196
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
QueryPerformanceCounter
GetProcAddress
CloseHandle
UnhandledExceptionFilter
Sleep
FreeLibrary
SetLastError
HeapAlloc
LocalFree
EnterCriticalSection
WaitForSingleObject
GetModuleFileNameW
GetStdHandle
GetCommandLineW
ReadFile
GetACP
GetFileType
GetConsoleMode
TlsSetValue
TlsAlloc
HeapSize
WriteConsoleW
LoadLibraryW
LoadLibraryExW
CreateThread
GetCPInfo
TlsFree
GetFileAttributesW
GetStringTypeW
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetOEMCP
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
GetConsoleCP
GetCommandLineA
SetEndOfFile
ReleaseMutex
EncodePointer
VirtualFree
LoadLibraryA
GetModuleHandleExW
user32
LoadStringW
ReleaseDC
PostQuitMessage
CreateWindowExW
GetMessageW
GetDC
GetWindowRect
PostMessageW
SendMessageW
GetClientRect
SetWindowPos
EnableWindow
IsWindow
GetParent
PeekMessageW
ScreenToClient
SetCursor
RegisterClassW
EnableMenuItem
GetWindow
GetWindowTextW
UpdateWindow
SystemParametersInfoW
GetKeyState
MessageBoxA
ClientToScreen
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ