Static task
static1
Behavioral task
behavioral1
Sample
8d24789b13d9188a9fd2e4d0f53ed9ea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8d24789b13d9188a9fd2e4d0f53ed9ea.exe
Resource
win10v2004-20231215-en
General
-
Target
8d24789b13d9188a9fd2e4d0f53ed9ea
-
Size
35KB
-
MD5
8d24789b13d9188a9fd2e4d0f53ed9ea
-
SHA1
d9f0cb558c3098b760c686655dfed63729a76988
-
SHA256
7de0b74e86ed6dd230d9fbb1097a3192ac0254c8bfaf8847d2e7317f5a93f458
-
SHA512
45e340d292cd1a2ae7456066b3ad9a2b9631d99eba06343248f2dd8c8400d75acb1d1c1d48978ea1c99db41700bc55d46e8f4e48c742fc451ccaff4dfb8780c2
-
SSDEEP
768:jJuE066/gtUFR53J5Ce7mvVb5GWn39FKIsXkMS0SDKwAmeOUe81vyVM:G67tUF/7C+mt9GW+IAJNSCzOUt1vyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d24789b13d9188a9fd2e4d0f53ed9ea
Files
-
8d24789b13d9188a9fd2e4d0f53ed9ea.exe windows:4 windows x86 arch:x86
13d80f9e4bdef058d76a71f4f3823e9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_controlfp
user32
FlashWindow
advapi32
CryptEncrypt
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetOpenUrlA
ole32
CoInitializeEx
oleaut32
SysAllocString
version
GetFileVersionInfoA
gdi32
GetDeviceCaps
Sections
.text Size: 30KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE