K:\mhWvsqz\iIIsbbAl\ybeOnyj\YKFimoonYzbp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8c6e37488e34ed90fa007d5b80bfa85c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c6e37488e34ed90fa007d5b80bfa85c.exe
Resource
win10v2004-20231215-en
General
-
Target
8c6e37488e34ed90fa007d5b80bfa85c
-
Size
168KB
-
MD5
8c6e37488e34ed90fa007d5b80bfa85c
-
SHA1
7ec6f2b7ebf31783b131efdfde0c24861c0693b6
-
SHA256
a1cadc98948eb5423f226cc29913911e4a98a413216b7398c09a5462f93d29d7
-
SHA512
bc193d1f0656b8cba9ee6f99024a083ea615836275c587087b8e232a0c1451143b61d0324ca20fe6efb790709e2b56ec203e6e0b2d5d08325778e066a9c8ff4d
-
SSDEEP
3072:zakSrRRYYOqINSRp7HpTelreUzzoEnTStm:0RbOvwpbpTOreUHoET
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c6e37488e34ed90fa007d5b80bfa85c
Files
-
8c6e37488e34ed90fa007d5b80bfa85c.exe windows:5 windows x86 arch:x86
1d2eb3167f5677ac574cab6cde64d666
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ChildWindowFromPointEx
AllowSetForegroundWindow
GetWindow
DialogBoxIndirectParamW
GetDialogBaseUnits
SetWindowLongA
GetForegroundWindow
DrawFrameControl
FindWindowA
CheckMenuRadioItem
FindWindowW
AppendMenuA
PostMessageA
GetActiveWindow
GetMenuItemRect
GetTopWindow
CallWindowProcA
GetMenuState
kernel32
CreateSemaphoreA
LocalAlloc
lstrcmpiA
GetFileSize
DefineDosDeviceW
SetLastError
LoadLibraryA
EscapeCommFunction
Exports
Exports
?VirtualDataRes
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfhgfh Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfhf Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uiyytg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bgv Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuouyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ