Static task
static1
Behavioral task
behavioral1
Sample
8c950357b590541190087206acc74cb5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c950357b590541190087206acc74cb5.exe
Resource
win10v2004-20231222-en
General
-
Target
8c950357b590541190087206acc74cb5
-
Size
20KB
-
MD5
8c950357b590541190087206acc74cb5
-
SHA1
62fcf163f0ca1e8c847ecc2552f7de908878bc5c
-
SHA256
8b377a4d45a756af79d21ecf649660d5d773d3db20a85c9543459fcd06ad9f6c
-
SHA512
959c567289e5356d52fd047aa37819ae383728aa039d4d0bb19464fc3966cabc5820c7f7b89f55eed0e560a52d58a81acd75f47dc96c1679a00449d0196ba5df
-
SSDEEP
384:QxRlNltDaQPE1ThD7aB1GvMi3DKSKXZn466LELXq+1dhRCZwz1CfGUbnB3nmg6nH:QxztDP4SB1GvMi3m5L6+1rIZ+UuM2HD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c950357b590541190087206acc74cb5
Files
-
8c950357b590541190087206acc74cb5.exe windows:1 windows x86 arch:x86
a3b88a69c81f7fcb994deeb0111961a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
ImageList_Destroy
InitCommonControlsEx
gdi32
CreateFontIndirectW
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetTextMetricsW
SelectObject
SetTextAlign
kernel32
CloseHandle
CopyFileW
CreateProcessW
DeleteFileW
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
GetCommandLineW
GetExitCodeProcess
GetFileAttributesW
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoA
GetVersionExA
GetVolumeInformationW
GlobalAlloc
GlobalFree
MultiByteToWideChar
SetErrorMode
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
ole32
CoInitialize
CoUninitialize
oleaut32
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear
user32
AdjustWindowRectEx
DestroyIcon
DestroyWindow
DispatchMessageW
GetClientRect
GetSysColor
GetSystemMetrics
GetWindowLongW
GetWindowRect
IsDialogMessageA
IsWindow
MapDialogRect
MessageBoxA
MessageBoxW
PeekMessageA
ScreenToClient
SendMessageA
TranslateAccelerator
TranslateMessage
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ