Static task
static1
Behavioral task
behavioral1
Sample
8ccde44eb8648ee04ac883f020f8b8b9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8ccde44eb8648ee04ac883f020f8b8b9.exe
Resource
win10v2004-20231222-en
General
-
Target
8ccde44eb8648ee04ac883f020f8b8b9
-
Size
314KB
-
MD5
8ccde44eb8648ee04ac883f020f8b8b9
-
SHA1
1e21579aceba21c3acfbee61d0362353251a0391
-
SHA256
9dfc000f4ed4e2f6f4c01ecd1aa9f90b972ab4f00e40f7daf6853a9ea53b0694
-
SHA512
e6aff2c82c27677fb054325e5eaa7ef7e90ea7bc0c87ee439aefc3ae0a8a537e75907790445a7190ecd23cbb3558e683453851bc850d705ba12925f910b95a2b
-
SSDEEP
6144:FcXPalPhVJfpXrhjYdmQthHykRJxcx7+uuvU8SNPZzkfLW5vHGi9m:FeilPhDfpbhjwmQthSkRAxeNOCf65vH4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ccde44eb8648ee04ac883f020f8b8b9
Files
-
8ccde44eb8648ee04ac883f020f8b8b9.exe windows:4 windows x86 arch:x86
58bc315907d66bd6874cde66e709755a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
msvbvm60
_CIcos
Sections
.text Size: 44KB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE