Static task
static1
Behavioral task
behavioral1
Sample
8c2170eaad7dcca4c8f57cd203c4608d.exe
Resource
win7-20231215-en
General
-
Target
8c2170eaad7dcca4c8f57cd203c4608d
-
Size
1.3MB
-
MD5
8c2170eaad7dcca4c8f57cd203c4608d
-
SHA1
2d2f1006a58b0d0a0aeedece83c74141043afacd
-
SHA256
f2df4d5092b05144965fad0f39120cf04822a831531b440479f83949f69ff233
-
SHA512
0344ce45a368e96fae16145981eed6d520c8fbd9127f18e7a5ce84619d28c9ebfcd64e4e203e11376505a587f332136ed723ffe424ff8e6d546e46ef8fa4ffe4
-
SSDEEP
24576:QKh12luUDO+EIf7YOqvceguug7CB9Oc4CZ4DhgL6qufjfkJoYBTnl5l2A8:NhIufYbewgCR4A6quioYBvk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c2170eaad7dcca4c8f57cd203c4608d
Files
-
8c2170eaad7dcca4c8f57cd203c4608d.exe windows:4 windows x86 arch:x86
fe4bdec14e349d908078b20b90cebc9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
HeapAlloc �a
kernel32
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
ExitProcess
GetFileAttributesA
GetWindowsDirectoryA
GetVersionExA
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
iphlpapi
GetAdaptersInfo
user32
GetWindow
shell32
SHGetFolderPathA
Sections
.text Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ