Static task
static1
Behavioral task
behavioral1
Sample
8cf42f065b2b601c0bceb0fd5008ef8b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8cf42f065b2b601c0bceb0fd5008ef8b.exe
Resource
win10v2004-20231215-en
General
-
Target
8cf42f065b2b601c0bceb0fd5008ef8b
-
Size
110KB
-
MD5
8cf42f065b2b601c0bceb0fd5008ef8b
-
SHA1
d8c9d744780d9beda00dbf55efef1e833fb3ece2
-
SHA256
e174bbe9d726d1dd3596436d299c695c7c32dfd95e749b08c261628c58947988
-
SHA512
a35ca479477a86d1021bd6bb3f85a7a455c72bf98b1bbb0e740bab02019c2b3ee55f109d772d1402ce53d67580a5bc31c71307a577a87b0a6844a96f3061e375
-
SSDEEP
1536:Fk2rIzDKvnPF852eb0MARlRDCVsat9MCVaKmEcBG4aPLfyF:Fk9zDSnPFW1b0rRlRDZat9MxKiDWjy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cf42f065b2b601c0bceb0fd5008ef8b
Files
-
8cf42f065b2b601c0bceb0fd5008ef8b.exe windows:4 windows x86 arch:x86
07f00f825a9eea76bf5ea092f1f7892d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateFontIndirectA
SelectObject
SelectPalette
RestoreDC
DeleteObject
SetStretchBltMode
DeleteDC
SetMapMode
GetDeviceCaps
GetPixel
RectVisible
GetClipBox
GetObjectA
PatBlt
SaveDC
SetTextAlign
CreatePen
LineTo
CreateCompatibleDC
GetTextMetricsA
CreatePalette
CreateSolidBrush
SetTextColor
SetPixel
GetStockObject
kernel32
GlobalFindAtomA
GetModuleHandleW
GetCurrentThreadId
GetUserDefaultLangID
IsDebuggerPresent
GetStartupInfoA
GetVersion
GetWindowsDirectoryA
GetACP
MulDiv
GetCommandLineW
GetThreadLocale
GetConsoleOutputCP
GlobalFindAtomW
GetCommandLineA
lstrcmpiA
DeleteFileW
GetCurrentProcessId
QueryPerformanceCounter
DeleteFileA
GetModuleHandleA
SetCurrentDirectoryA
lstrcmpiW
GetCurrentProcess
GetOEMCP
RemoveDirectoryA
lstrcmpA
GetDriveTypeA
CopyFileA
RemoveDirectoryW
GetTickCount
GetCurrentThread
lstrlenW
lstrlenA
GetProcessHeap
VirtualAlloc
VirtualFree
user32
CharNextA
GetDesktopWindow
TranslateMessage
GetParent
GetSystemMetrics
glu32
gluQuadricCallback
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ